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...ANNOUNCING EEC-1 ™... 


The First Affordable Parallel Computer 



for only $12,950*. 


4 node parallel computer with 1 MBytes per node 
(up to 16 nodes with 4 MBytes per node) 


33 MHZ 80386 host 
(80486 optional) 


8 MBytes Memory 
(up to 16 MBytes) 


150MByte hard disk 
(up to 1.2 GByte) 


1/4" cartridge tape drive" 
(QIC-40) 


Serial & parallel ports- I 

fk 


. PWORKS, graphical parallel 
workstation environment 

/OSF/Motif, X Window 

EXPRESS, 

' parallel programming 
environment: 
parallel debugger, 
performance monitor, 
parallel graphics library 

14” color monitor 
' (optional 16” or 19" ) 
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MIPS (up to 200 MIPS) 
MFLOPS (up to 40 MFLOPS) 


High-resolution color graphics: 1024x768, 
256 colors out of 16.7 million palette 


Transputer based system 
Call us for our i860 based system 
33 MIPS to 160 MIPS 
66 MFLOPS to 320 MFLOPS 


The EEC-1 Parallel Workstation 


The EEC-1 delivers performance at a cost that makes innovative parallel processing technology affordable today for everyone’s lab 
and desk. An integrated, user-friendly, graphical parallel processing environment provides both a turnkey system for those 
interested in cost-performance and a flexible, cost-effective parallel processing workbench for students, teachers, researchers and 
developers. 


COST-PERFORMANCE - priced at S250/MIP for extra 
low-cost processing power 

APPLICATIONS - neural networks, finite element, 
structural analysis, image processing and others 

PORTABILITY - portable to NCUBE, iPSC, Connection 
Machine and Cray supercomputers 

NETWORKING - Ethernet with Sun workstations, IBM 
PC’s and others with XI1 


Matrix Inversion (500x500) 
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Cost ($1000) 

Special introductory US price of $12,950 (academic) and $14,950 (non-academic) for orders placed prior to 
See us at IJCNN 90, ICPP 90 and Supercomputing90. (Call for international prices) 



EE International Computer Corporation 
77 Oak Knoll Avenue Suite 104 
Pasadena, California 91101 
(818) 793-8255 Fax: (818) 793-0994 


TAIWAN: EXARTECH Corp. 02-537-2201 
KOREA: Sangsoo Electronics 02-780-5360 

EUROPE: EE International Computer Corporation 
Amsterdam 31-2-50-33-19-86 


Attend one of our parallel processing courses. Contact us for current schedule near you. 
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New for network analysts and designers 

Free trial and, if you act now, free training 


LANNET II. 5 
Local Area Networks 



L ANNET II.5 uses simulation to predict 
your LAN performance. You simply 
describe your LAN and workload. 

Animated simulation follows immediately 
-no programming. 

Easy-to-understand results 

You get an animated picture of your LAN. 
System bottlenecks and changing levels of 
utilization are apparent. 

Your reports show LAN statistics such as 
transfer times, delays, and queues. Client, server, 
and gateway statistics show queue lengths, 
waiting times, and messages sent. 

Your LAN simulated 

You can predict the performance of any LAN. 
Industry standard protocols such as Ethernet, 
Token Ring, and Token Bus are built-in. Varia¬ 
tions can be modeled. 


COMNET II. 5 
Wide Area Networks 



C OMNET II.5 uses simulation to predict 
your network performance. You simply 
describe your network, traffic load, and routing 
algorithms. 

Animated simulation follows immediately 
-no programming. 

Easy-to-understand results 

You get an animated picture of your network. 
Routing choices and changing levels of network 
utilization are apparent. 

Your reports show response times, blocking 
probabilities, call queueing and packet delays, 
network throughput, circuit group utilization, 
and circuit group queue statistics. 

Your network simulated 

You can include LAN’s and multidrop lines in 
your model. X.25, SNA, DECNET, ISDN, fast 
packet, TCP/IP, token passing, and CSMA/CD 
are easily modeled. 


Free Trial Offer 

The free trial contains everything you need to 
try LANNET II.5™ or COMNET II.5™ on 
your PC, Workstation, or Mainframe. Act now 
for free training-no cost, no obligation. 

For immediate information 

For LANNET II.5 call Cliff Baker or for 
COMNET II.5 call Chris LeBaron at (619) 
457-9681, Fax (619) 457-1184. In Europe, call 
Nigel McNamara, in the UK, on (081) 332-0122, 
Fax (081) 332-0112. Worldwide, call Joe Lenz, in 
the US, (619) 457-9681, Fax (619) 457-1184. 

University faculty should call about our 
special offer for research and teaching. 


Rush free trial & training information for: 

□ LANNET II.5 □ COMNET II.5 





Fax (619) 457-1184. Fax (081) 332-0112. 

IEEE COMP 


LANNET 11.5 and COMNET II. 5 i 
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ARTICLES 


g A Specifier’s Introduction to Formal Methods 

Jeannette M. Wing 

Applied to computer systems development, formal methods provide mathematically based techniques that describe system 
properties. As such, they present a framework for systematically specifying, developing, and verifying systems. 

2 7 Tango: A Framework and System for Algorithm Animation 

John T. Stasko 

Programmers can more easily understand programs displayed in an animated graphical way. This article introduces a 
framework for algorithm animation and a system based on that framework. 

40 Project Athena as a Distributed Computer System 

George A. Champine, Daniel E. Geer, Jr., and William N. Ruh 
Now providing 10,000 students and faculty with a variety of network services, MIT’s educational workstation system is 
designed to grow to 10 times its present size. 

52 Multimedia Conferencing on Local Area Networks 

Chaim Ziegler and Gerald Weiss 

A logical-ring shuttle packet can be used to deliver voice, acknowledged, and unacknowledged data for efficient 
multimedia conferencing using off-the-shelf PC hardware. 

03 Multiprocessor Performance-Measurement Instrumentation 

Alan Mink, Robert Carpenter, George Nacht, and John Roberts 
The hybrid measurement systems developed by NIST are implemented as VLSI chips. They introduce little perturbation 
and provide physically small and affordable performance-measurement support. 


SPECIAL REPORT 


7 7 Gigabit Network Testbeds 

The National Science Foundation and the Defense Advanced Research Projects Agency announced June 8 they were 
awarding $15.8 million to the nonprofit Corporation for National Research Initiatives to investigate gigabit network 
communications. Five testbeds around the country will examine gigabit applications and network technologies. These 
summaries were prepared by the testbeds. 
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Late Magazines? 
No Magazines? 
Membership 
Status Problems? 
No Answers 
To Your 
Complaints? 

Let your 
Computer 
Society 
Ombudsman 
cut 

through 
the red 
tape 
for you. 

Ombudsman 
IEEE Computer Sod ., 

10662 Los Vaqueros Circle 
PO Box 3014 
Los Alamitos, CA 
90720-1264 



Jobs for 
computer 
pros! 


Every week, the National Business 
Employment Weekly, published by 
The Wall Street Journal, contains 
hundreds of high-paying jobs from all 
across the country, including career 
opportunities in virtually every area 
of computer technology. 

PLUS...weekly editorial features 
covering every aspect of career 
advancement. 

"Computer" Issue. 

October 7th. 

Extra career opportunities 
for computer professionals. 


Pick up the National Business 
Employment Weekly at your news¬ 
stand today. Or we'll send you the 
next eight issues by first class mail. 
Just send a check for $35 to: 


Help wanted: 

What do members want of their society? 


Some say that if you do it right the 
first time, you should be more careful the 
next time! A few years ago, the Comput¬ 
er Society’s Board of Governors asked 
members to rank our products and ser¬ 
vices. The society had been growing rap¬ 
idly, so it seemed clear that we were do¬ 
ing something right. Now you might ask, 
“If everything was going well, why ask 
questions? Just keep doing more of the 
same.” But it wasn’t that simple. 

As our membership grew, many other 
changes were taking place. Attendance at 
tutorials and conferences increased, new 
standards working groups were formed, 
new magazines were published, the first 
person from outside the United States 
was elected to the Board of Governors... 
the list goes on. 

Major changes present both risk and 
opportunity. If conferences continue to 
grow in number and size, then the Con¬ 
ferences Department must be prepared to 
provide needed support to conference or¬ 
ganizers. The same holds true for stan¬ 
dards activities, publications, and so 
forth. To make good decisions in such a 
situation requires good data, so the board 
carried out a survey of the membership. 

The results of that study were enor¬ 
mously helpful. They even contained a 
few surprises. We learned, for example, 
that members ranked standards activities 
second only to Computer magazine in 
importance to them personally or to the 
profession. Now this wasn’t news to 
those who had been involved in stan¬ 
dards development, but the survey fo¬ 
cused high-level attention on this excit¬ 
ing program. As a result, support was 
increased and today the Computer Soci¬ 
ety sponsors nearly 200 standards, work¬ 
ing groups, and studies. This spring we 
hosted the plenary meeting of the inter¬ 
national standards committee concerned 
with software engineering. 

We have now incorporated some kind 
of information-gathering technique in 
most of our programs. Society program 
boards use this information when they 
face major decisions or just want to veri¬ 
fy that they are in tune with the needs of 
members, subscribers, and participants. 
But you don’t have to wait for a ques¬ 
tionnaire to express your opinions! Just 



write a letter or send a fax to any of the 
society’s officers or staff in care of our 
offices in Washington, DC, California, 
Belgium, or Japan. 

You can find the society officers and 
the various office addresses listed on the 
Computer Society information page pub¬ 
lished in every issue of every society 
magazine and transactions. (See p. 144 
of this issue.) It’s there to help you help 
us, your elected leaders, stay in touch. I 
personally have received a number of let¬ 
ters this year — and I can assure you that 
they are read, shared, and discussed, and 
that they lead to action. Current activities 
that have grown out of member sugges¬ 
tions (and complaints) include joint ef¬ 
forts with IEEE to reduce the processing 
time required for new applications and 
subscriptions. We are also decentralizing 
the Distinguished Visitors Program so 
that it can be operated in cooperation 
with national societies in Europe, Asia, 
and the Pacific Rim, and we are studying 
ways to improve the timeliness of publi¬ 
cation delivery to our non-US members. 

Your help is wanted. Let us know how 
we can keep your society vital and re¬ 
sponsive to your current technical and 
professional needs. 

Helen M. Wood 

Computer Society president 
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Turn Your 
Designing 
Maze Into 
Amazing 
Designs. 



SES /workbench™ 

System-Level Design Simulation and Modeling Software 



SES Idea 

a rich set of 
graphical modeling 
primitives that are 
the basic building 
blocks for system 


Now there is an easy to use, elegant 
tool that guides you through the maze 
of complex systems design and helps 
you evaluate design alternatives 
to discover the consequences of 
decisions before you commit to them. 
SES/ workbench. 

SES/workbench is the premier 
multi-level design environment from 
the established leaders in system 
simulation, modeling and design 
evaluation, Scientific and Engineering 
Software, Inc. It can be used to 
evaluate design decisions throughout 
the development cycle, from the 
earliest conceptual stages, through 
system specification and design, to 
functional and perform¬ 
ance verification. 

SES /workbench advances 
the state of the art in 
system-level design and 
evaluation software. 

Its unique graphical interface, 

SES /design, allows you to create a 
pictorial representation of a system’s 
structure and to specify its behavior 
at a high level. 

• You can quickly analyze design 
alternatives and tradeoffs with a few 
clicks of a mouse button. 


Representation of 
the system evolves natu¬ 
rally from a high-level 
behavioral description 
to a low-level structural 
description. 

The graphical 
representation of the 
system is translated 
into SES Isim, an object- 
based superset of C and C++ 
that offers many extensions 
developed specifically for 
simulation modeling. 

Comprehensive statistical 
reports provide a precise 
description of the system’s 
behavior, so that you can evaluate 
system performance. 

Free trial licenses are available. 

For more information, call our 
toll-free marketing hotline: 

1 - 800 - 759-6333 

SES/workbench. 

A testbed for the imagination. 


Scientific and Engineering Software, Inc. 
1301 West 25th Street, Suite #300 
Austin, Texas, U.S.A. 

Phone: 512/474-4526 Fax: 512/479-6217 


can easily construct 
graphical representations 
of highly complex systems. 
SEBldesign graphs are 
automatically translated 
into SES/*, the powerful 


heart of SES/rnnkhench. 
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Display 

Modules 


filed 


Find Hidden Answers. 


Only 

*1495 


ExploreNet 3000™ 

is advanced neural network 
software for the PC that helps 
you find hidden answers in 
your data. You will experience 
the ease of developing your 
application within 
Microsoft Windows™ 

3.0 environment 
(compatible with 
over 3,000 other 
programs on the PC/ 

AT). And best of all, 
you can develop 
applications without 
programming! 

ExploreNet 3000 
applications are 
10096 compatible with HNC’s 
ANZA Plus™ coprocessors. 

File Module 

Support fixed and variable 
length ASCII and binary files, 
which can be generated by 
9996 of all programs. For 
instance, output from such 
popular programs as Lotus 
1-2-3™, dBase II™ and Excel™ 
can be used without 
modification. 


PxploreNet 


Watch your network train and 
learn by monitoring the results 
using six different display 
options: Plots, Tiles, Images, 
Forms and Charts 
(pie charts and bar 
charts). 


Data 

H w I Transformation 
j Module 

Perform pre-and post-process¬ 
ing operations by combining 
functions from a library of 
over 50 routines. Supports 
scalar, vector and matrix 
operations. 


Receive input from and output 
to thousands of other programs 
including expert systems, 
databases and applications 
programs running on the PC 
under MS-Windows. 


Tailor any of the 18 
well-known neural 
networks to your 
application, or 
modify the architec¬ 
ture of one of the three exper¬ 
imental networks to your 
specifications. 

ExploreNet 3000 will get you 
up and running faster than 
any other neural network 
product on the market—we’ll 
back it with a 30-day money- , 
back guarantee. 

CaD 

1-800-HNC-EXPR 


5501 Oberlin Drive 
San Diego, CA 92121 
(619) 546-8877 
Fax (619) 452-6524 
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A Specifier’s 
Introduction 
to Formal 
Methods 


Jeannette M. Wing, Carnegie Mellon University 


F ormal methods used in developing 
computer systems are mathemati¬ 
cally based techniques for describ¬ 
ing system properties. Such formal meth¬ 
ods provide frameworks within which peo¬ 
ple can specify, develop, and verify systems 
in a systematic, rather than ad hoc, manner. 

A method is formal if it has a sound 
mathematical basis, typically given by a 
formal specification language. This basis 
provides the means of precisely defining 
notions like consistency and completeness 
and, more relevantly, specification, imple¬ 
mentation, and correctness. It provides the 
means of proving that a specification is 
realizable, proving that a system has been 
implemented correctly, and proving prop¬ 
erties of a system without necessarily run¬ 
ning it to determine its behavior. 

A formal method also addresses a num¬ 
ber of pragmatic considerations: who uses 
it, what it is used for, when it is used, and 
how it is used. Most commonly, system 
designers use formal methods to specify a 
system’s desired behavioral and structural 
properties. 

However, anyone involved in any stage 
of system development can make use of 
formal methods. They can be used in the 
initial statement of a customer’s require¬ 
ments, through system design, implemen¬ 
tation, testing, debugging, maintenance, 
verification, and evaluation. 

Formal methods are used to reveal ambi¬ 
guity, incompleteness, and inconsistency 
in a system. When used early in the system 
development process, they can reveal de- 



Applied to computer 
systems development, 
formal methods 
provide 

mathematically based 
techniques that 
describe system 
properties. As such, 
they present a 
framework for 
systematically 
specifying, developing, 
and verifying systems. 


sign flaws that otherwise might be discov¬ 
ered only during costly testing and debug¬ 
ging phases. When used later, they can 
help determine the correctness of a system 
implementation and the equivalence of 
different implementations. 

For a method to be formal, it must have 
a well-defined mathematical basis. It need 


not address any pragmatic considerations, 
but lacking such considerations would ren¬ 
der it useless. Hence, a formal method 
should possess a set of guidelines or a 
“style sheet” that tells the user the circum¬ 
stances under which the method can and 
should be applied as well as how it can be 
applied most effectively. 

One tangible product of applying a for¬ 
mal method is a formal specification. A 
specification serves as a contract, a valu¬ 
able piece of documentation, and a means 
of communication among a client, a spec¬ 
ifier, and an implementer. Because of their 
mathematical basis, formal specifications 
are more precise and usually more concise 
than informal ones. 

Since a formal method is a method and 
not just a computer program or language, it 
may or may not have tool support. If the 
syntax of a formal method’s specification 
language is made explicit, providing stan¬ 
dard syntax analysis tools for formal spec¬ 
ifications would be appropriate. If the 
language’s semantics are sufficiently re¬ 
stricted, varying degrees of semantic anal¬ 
ysis can be performed with machine aids as 
well. Thus, formal specifications have the 
additional advantage over informal ones of 
being amenable to machine analysis and 
manipulation. 

For more on the benefits of formal spec¬ 
ification, see Meyer. 1 For more on the 
distinction between a method and a lan¬ 
guage, and what specifying a computer 
system means, see Lamport. 2 

Continued on p. 10 
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Extending and complementing Computer’s tutorial. . . 


Companion Issues 
on Formal Methods 


September 1990 
IEEE Software 



September 1990 
IEEE Transactions on 
Software Engineering 

Formal Methods in Software Engi¬ 
neering 

Guest Editor’s Introduction: 

N.G. Leveson 

The Specification and Verified Decom¬ 
position of System Requirements 
Using CSP 

A.P. Moore 

Specification and Verification Using 
Dependent Types 

F.K. Hanna, N. Daeche, and M. Longley 

A Formal Model of Program Depen¬ 
dences and Its Implications for Soft¬ 
ware Testing, Debugging, and Mainte¬ 
nance 

A. Podgurski and L.A. Clarke 

Approximate Reasoning About the 
Semantic Effects of Program Changes 

M. Moriconi and T. Winkler 

Mechanizing CSP Trace Theory in 
Higher Order Logic 

A.J. Camilleri 

Mechanically Verifying Concurrent 
Programs with the Boyer-Moore Prover 

D.M. Goldschlag 

KIDS: A Semiautomatic Program 
Development System 

D.R. Smith 

Using LP to Debug Specifications 

S.J. Garland, J. V. Guttag, and J.J. 
Horning 

Formal Verification of Ada Programs 

D. Guaspari, C. Marceau, and W. Polak 

Using Larch to Specify Avalon/C++ 
Objects 

J. M. Wing 

Formal Specification of a Look 
Manager 

K. T. Narayana and S. Dharap 


Applications of Formal Methods: 
Developing Virtuoso Software 

Guest Editor's Introduction: 

Susan L Gerhart 

Formal methods are a fundamental com¬ 
ponent to putting the “engineering” in soft¬ 
ware engineering. They are ripe for ex¬ 
ploitation by practitioners on a range of 
systems. 

Seven Myths of Formal Methods 

Anthony Hall 

Formal methods are difficult, expensive, 
and not widely useful, detractors say. Us¬ 
ing a case study and other real-world ex¬ 
amples, this article challenges such com¬ 
mon myths. 

Specifying a Real-Time Kernel 

J. Michael Spivey 

This case study of an embedded real-time 
kernel shows that mathematical tech¬ 
niques have an important role to play in 
documenting systems and avoiding de¬ 
sign flaws. 

A Formal Specification of an 
Oscilloscope 

Norman Delisle and David Garian 
Unlike most work on the application of for¬ 


mal methods, this research uses formal 
methods to gain insight into system archi¬ 
tecture. The context for this case study is 
electronic instrument design. 

Integrating Formal Methods into the 
Development Process 

Richard A. Kemmerer 
Integrating formal specification and verifi¬ 
cation with development is faster and 
more cost-effective than doing the steps 
separately or in parallel, as this effort 
showed. 

Formal Verification of a Pipelined 
Microprocessor 

Mandayam Srivas and Mark Bickford 
This case study shows the usefulness of 
functional languages to model program¬ 
interpreting machines like microproces¬ 
sors and to verify their behavior. 

The Case for Formal Methods in 
Standards 

David Blyth, Cornelia Boldyreff, Clive 

Ruggles, and Nik Tetteh-Lartey 
Applying formal methods to standards- 
making would result in more accurate, 
more understandable, and more useful 
standards. 


Companion Issue Order Form 


September 1990 IEEE Software and 
IEEE Transactions on Software Engineering 

Members: □ Both, $20.00 □ IEEE Software, $10.00 

□ IEEE Trans, on Software Engineering, $10.00 
Non-Members: □ Both, $40.00 □ IEEE Software, $20.00 

□ IEEE Trans, on Software Engineering, $20.00 

Name:_ ' _;______ 


City/State/Postal Code:_ 

IEEE-CS Member No. (required for discount):_ 

Return with payment to: IEEE Computer Society, Order Dept., 

PO Box 3014, Los Alamitos, CA 90720-1264 
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What is a specification 
language? 

A formal specification language pro¬ 
vides a formal method’s mathematical ba¬ 
sis. I borrowed the terms and definitions 
that follow from Guttag et al. 3 Burstall and 
Goguen have used the term “language” and 
more recently the term “institution” for the 
notion of a formal specification language. 

Definition: A formal specification language 
is a triple, <Syn, Sem, Sat>, where Syn and Sem 
are sets and Sat £ Syn x Sem is a relation 
between them. Syn is called the language’s 
syntactic domain; Sem, its semantic domain; 
and Sat, its satisfies relation. 

Definition: Given a specification language, 
<Syn, Sem, Sat>, if Sat(syn, sem) then syn is 
a specification of sem, and sem is a specificand 

Definition: Given a specification language, 
<Syn, Sem, Sat>, the specificand set of a 
specification syn in Syn is the set of all 
specificands sem in Sem such that Sat(syn, 
sem). 

Less formally, a formal specification 
language provides a notation (its syntactic 
domain), a universe of objects (its seman¬ 
tic domain), and a precise rule defining 
which objects satisfy each specification. A 
specification is a sentence written in terms 
of the elements of the syntactic domain. It 
denotes a specificand set, a subset of the 
semantic domain. A specificand is an ob¬ 
ject satisfying a specification. The satisfies 
relation provides the meaning, or interpre¬ 
tation, for the syntactic elements. 

Backus-Naur form is an example of a 
simple formal specification language, with 
a set of grammars as its syntactic domain 
and a set of strings as its semantic domain. 
Every string is a specificand of each gram¬ 
mar that generates it. Every specificand set 
is a formal language. 

In principle, a formal method is based on 
some well-defined formal specification 
language. In practice, however, this lan¬ 
guage may not have been explicitly given. 
The more explicit the specification lan¬ 
guage’s definition, the more well-defined 
the formal method. 

Formal methods differ because their 
specification languages have different 
syntactic and/or semantic domains. Even if 
they have identical syntactic and semantic 
domains, they may have different satisfies 
relations. 

Syntactic domains. We usually define a 
specification language’s syntactic domain 
in terms of a set of symbols (for example, 
constants, variables, and logical connec¬ 


tives) and a set of grammatical rules for 
combining these symbols into well-formed 
sentences. For example, using standard 
notation for universal quantification (V) and 
logical implication (=>), let x be a logical 
variable and P and Q be predicate symbols. 
Then this sentence, Vx.E(^) => Q(x), would 
be well-formed in predicate logic, but this 
one, Vx. => P(x) => Q(x), would not be¬ 
cause => is a binary logical connective. 

A syntactic domain need not be restrict¬ 
ed to text; graphical elements such as box¬ 
es, circles, lines, arrows, and icons can be 
given a formal semantics just as precisely 
as textual ones. A well-formedness condi¬ 
tion on such a visual specification might be 
that all arrows start and stop at boxes. 

Semantic domains. Specification lan¬ 
guages differ most in their choice of se¬ 
mantic domain. The following are some 
examples: 

• Abstract-data-type specification lan¬ 
guages are used to specify algebras, theo¬ 
ries, and programs. Though specifications 
written in these languages range over dif¬ 
ferent semantic domains, they often look 
syntactically similar. 

• Concurrent and distributed systems 
specification languages are used to specify 
state sequences, event sequences, state and 
transition sequences, streams, synchroni¬ 
zation trees, partial orders, and state ma¬ 
chines. 

• Programming languages are used to 
specify functions from input to output, 
computations, predicate transformers, re¬ 
lations, and machine instructions. 

Each programming language (with a well- 
defined formal semantics) is a specifica¬ 
tion language, but the reverse is not true, 
because specifications in general do not 
have to be executable on some machine 
whereas programs do. By using a more 
abstract specification language, we gain 
the advantage of not being restricted to 
expressing only computable functions. It is 
perfectly reasonable in a specification to 
express notions like “For all x in set A, there 
exists ay in set B such that property P holds 
of x and y,” where A and B might be infinite 
sets. 

Programs, however, are formal objects, 
susceptible to formal manipulation (for 
example, compilation and execution). Thus, 
programmers cannot escape from formal 
methods. The question is whether they work 
with informal requirements and formal 
programs, or whether they use additional 
formalism to assist them during require¬ 
ments specification. 


When a specification language’s seman¬ 
tic domain is over programs or systems of 
programs, the term implements is used for 
the satisfies relation, and the term imple¬ 
mentation is used for a specificand in Sem. 
An implementation prog is correct with 
respect to a given specification spec if prog 
satisfies spec. More formally, 

Definition: Given a specification language, 
<Syn, Sem, Sat>, an implementation prog in 
Sem is correct with respect to a given 
specification spec in Syn if and only if Sat(spec, 
prog). 

Satisfies relation. We often would like 
to specify different aspects of a single 
specificand, perhaps using different spec¬ 
ification languages. For example, you might 
want to specify the functional behavior of 
a collection of program modules as the 
composition of the functional behaviors of 
the individual modules. You might addi¬ 
tionally want to specify a structural rela¬ 
tionship between the modules such as what 
set of modules each module directly in¬ 
vokes. 

To accommodate these different views 
of a specificand, we first associate with 
each specification language a semantic 
abstraction function, which partitions 
specificands into equivalence classes. 

Definition: Given a semantic domain, Sem, a 
semantic abstraction function is a 
homomorphism, A: Sem -» 2 s ™, that maps 
elements of the semantic domain into 
equivalence classes. 

For a given specification language, we 
choose a semantic abstraction function to 
induce an abstract satisfies relation between 
specifications and equivalence classes of 
specificands. This relation defines a view 
on specificands. 

Definition: Given a specification language, 
<Syn, Sem, Sat>, and a semantic abstraction 
function, A, defined on Sem, an abstract 
satisfies relation, ASar.Syn —> 2 s "”, is the 
induced relation such that 

Vspec e Syn,prog e Sem • 
[Sat(spec,prog) = ASat(specA(prog))\ 

Different semantic abstraction functions 
make it possible to describe multiple views 
of the same equivalence class of systems, 
or similarly, impose different kinds of con¬ 
straints on these systems. Having several 
specification languages with different se¬ 
mantic abstraction functions for a single 
semantic domain can be useful. This en¬ 
courages and supports complementary 
specifications of different aspects of a sys- 
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For example, in Figure 1, a single se¬ 
mantic domain, Sem, is on the right. One 
semantic abstraction function partitions 
specificands in Sem into a set of equiva¬ 
lence classes, three of which are drawn as 
blobs in solid lines. Another partitions 
specificands into a different set of equiva¬ 
lence classes, two of which are drawn as 
blobs in dashed lines. Via the abstract sat¬ 
isfies relation ASatl, specification A of 
syntactic domain Synl maps to one equiv¬ 
alence class of specificands (denoted by a 
solid-lined blob), and via ASat2, specifica¬ 
tion B of syntactic domain Syn2 maps to a 
different equivalence class of specificands 
(denoted by a dashed-line blob). Note the 
overlap between the solid-lined and dashed- 
lined blobs. 

To be concrete, suppose Sem is a library 
of Ada program modules. Imagine that A 
specifies (perhaps through a predicate in 
first-order logic) all procedures that sort 
arrays, and B specifies (perhaps through a 
call graph) all procedures that call func¬ 
tions on a user-defined enumeration type 
E. Then, a procedure that sorts arrays of 
E 's might be in the intersection of ASatl (A) 
and ASat2(5). 

Two broad classes of semantic abstrac¬ 
tion functions are those that abstract pre¬ 
serving each system’s behavior and those 
that abstract preserving each system’s 
structure. In the example above, A specifies 
a behavioral aspect of the Ada program 
modules, but B describes a structural aspect. 

Behavioral specifications. Behavioral 
specifications describe only constraints on 
the observable behavior of specificands. 
The behavioral constraint that most formal 
methods address is a system’s required 
functionality (that is, mapping from inputs 
to outputs). Current research in formal 
methods addresses other behavioral aspects, 
such as fault tolerance, safety, security, 
response time, and space efficiency. 

Often, some of these behavioral aspects, 
such as security, are included as part of, 
rather than separate from, a system’s func¬ 
tionality. If the overall correctness of a 
system is defined so that it must satisfy 
more than one behavioral constraint, a sys¬ 
tem that satisfies one but not another would 
be incorrect. For example, if functionality 
and response time were the constraints of 
interest, a system producing correct answers 
past deadlines would be just as unaccept¬ 
able as a system producing incorrect an¬ 
swers on time. 

Structural specifications. Structural 
specifications describe constraints on the 


internal composition of specificands. Ex¬ 
ample structural specification languages 
are module interconnection languages. 
Structural specifications capture various 
kinds of hierarchical and uses relations 
such as those represented by procedure- 
call graphs, data-dependency diagrams, and 
definition-use chains. Systems that satisfy 
the same structural constraints do not nec¬ 
essarily satisfy the same behavioral con¬ 
straints. Moreover, the structure of a 
specification need not bear any direct rela¬ 
tionship to the structure of its specificands. 

Properties of specifications. Each 
specification language should be defined 
so each well-formed specification is unam¬ 
biguous. 

Definition: Given a specification language, 
<Syn, Sem , Sat>, a specification syn in Syn is 
unambiguous if and only if Sat maps syn to 
exactly one specificand set. 

Informally, a specification is unambigu¬ 
ous if and only if it has exactly one mean¬ 
ing. This key property of formal specifica¬ 
tions means that any specification language 
based on or incorporating a natural lan¬ 
guage (like English) is not formal since 
natural languages are inherently ambigu¬ 
ous. It also means that a visual specifica¬ 
tion language that permits multiple inter¬ 
pretations of a box and/or arrow is 
ill-defined, and hence not formal. 

Another desirable property of specifica¬ 
tions is consistency. 

Definition: Given a specification language, 
<Syn, Sem, Sat>, a specification syn in Syn is 


consistent (or satisfiable) if and only if Sat 
maps syn to a non-empty specificand set. 

Informally, a specification is consistent 
if and only if its specificand set is non¬ 
empty. In terms of programs, consistency 
is important because it means there is some 
implementation that will satisfy the speci¬ 
fication. If you view a specification as a set 
of facts, consistency implies that you cannot 
derive anything contradictory from the 
specification. 

Were you to pose a question based on a 
consistent specification you would not get 
mutually exclusive answers. Obviously, 
we want consistent specifications. An in¬ 
consistent specification, which negates on 
one occasion what it asserts on another, 
means you have no knowledge at all. 

Specifications need not be complete in 
the sense used in mathematical logic, though 
certain relative-completeness properties 
might be desirable (for example, sufficient 
completeness of an algebraic specification 4 ). 

In practice, you must usually deal with 
incomplete specifications. Why? Specifi¬ 
ers may intentionally leave some things 
unspecified, giving the implementer some 
freedom to choose among different data 
structures and algorithms. Also, specifiers 
cannot realistically anticipate all possible 
scenarios in which a system will be run and 
thus, perhaps unwittingly, have left some 
things unspecified. Finally, specifiers de¬ 
velop specifications gradually and itera¬ 
tively, perhaps in response to changing 
customer requirements, and hence work 
with unfinished products more often than 
finished ones. 
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A delicate balance exists between say¬ 
ing just enough and saying too much in a 
specification. Specifiers want to say enough 
so that implementers do not choose unac¬ 
ceptable implementations. Specifiers are 
responsible for not making oversights; any 
incompleteness in the specification should 
be an intentional incompleteness. On the 
other hand, saying too much may leave 
little design freedom for the implementer. 
A specification that overspecifies is guilty 
of implementation bias. 5 

Informally, a specification has imple¬ 
mentation bias if it specifies externally 
unobservable properties of its specificands; 
it places unnecessary constraints on its 
specificands. For example, a set specifica¬ 
tion that keeps track of the insertion order 
of its elements has implementation bias 
toward an ordered-list representation and 
against a hash table representation. 

Proving properties of specificands. 

Most formal methods are defined in terms 
of a specification language that has a well- 
defined logical inference system. A logical 
inference system defines a consequence 
relation, typically given in terms of a set of 
inference rules, mapping a set of well- 
formed sentences in the specification lan¬ 


guage to a set of well-formed sentences. 

We use this inference system to prove 
properties from the specification about 
specificands. Again taking a specification 
as a set of facts, we derive new facts through 
the application of the inference rules. 

When you prove a statement inferable 
from these facts, you prove a property that 
a specificand satisfying the specification 
will have, a property not explicitly stated 
in the specification. An inference system 
gives users of formal methods a way to 
predict a system’s behavior without hav¬ 
ing to execute or even build it. It gives 
users a way to state questions, in the form 
of conjectures, about a system cast in terms 
of just the specification itself. Users can 
then answer these questions in terms of a 
formal proof constructed through a formal 
derivation process. 

The inference system increases user 
confidence in the specification’s validity. 
If users are able to prove a surprising result 
from the specification, then perhaps the 
specification is wrong. 

A formal method with an explicitly de¬ 
fined inference system usually has the fur¬ 
ther advantage that this system can be 
completely mechanized (for example, if it 
has a finite set of finite rules). Theorem 


provers and proof checkers are example 
tools that assist users with the tedium of 
deriving and managing formal proofs. 

Pragmatics 

Certain pragmatic concerns exist about 
formal methods, their users, their uses, and 
their characteristics. 

Users. Some users of formal methods 
are actually going to produce something 
tangible: formal specifications. However, 
most people need only read specifications, 
not develop their own from scratch. Be¬ 
sides specification writers, there are sever¬ 
al kinds of specification readers. 

In Figure 2, each stick figure represents 
a different role in the system development 
process. A person playing any of these roles 
is a potential specification user. In practice, 
one person may play multiple roles, and 
some role may not be played at all. 

Specifiers write, evaluate, analyze, and 
refine specifications. They prove that their 
refinements preserve certain properties and 
prove properties of specificands through 
specifications. Specification readers, be¬ 
sides specifiers, are customers, those peo¬ 
ple who may have hired the specifiers; 
implementers, those people who realize a 
specification; clients, those people who use 
a specified system, usually without knowl¬ 
edge of how it is implemented; and verifi¬ 
ers, those people who prove the correct¬ 
ness of implementations. All these people 
can benefit from the assistance of machine 
tools (another kind of specification reader), 
some of which might blindly manipulate 
specifications without regard to their 
meaning. 

One point of tension in many formal 
methods is that their languages may be 
more suitable to one type of specification 
user than to others. Most language design¬ 
ers will target their language for at least 
two types of users (for example, clients and 
specifiers or specifiers and implementers). 
Some specification languages contain a lot 
of syntactic “sugar” to make specifications 
more readable by customers. Some contain 
a minimal amount because the intent of the 
method is to do formal proofs by machines 
or because the meaning of a rich set of 
cryptic mathematical notation is assumed. 

An advocate of a particular formal meth¬ 
od should tell potential users the method’s 
domain of applicability. For example, a 
formal method might be applicable for 
describing sequential programs but not 
parallel ones, or for describing message- 
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passing distributed systems but not trans¬ 
action-based distributed databases. With¬ 
out knowing the proper domain of applica¬ 
bility, a user may inappropriately apply a 
formal method to an inapplicable domain. 

A formal method’s set of guidelines 
should identify different types of users the 
method is targeted for and the capabilities 
each should have. To apply some methods 
properly, users might need to know mod¬ 
ern algebra, set theory, and/or predicate 
logic. To apply some domain-specific 
methods, users might need to know addi¬ 
tional mathematical theories — for exam¬ 
ple, digital logic, if specifying hardware, 
or probability and statistics, if specifying 
system reliability. 

Uses. You can apply formal methods in 
all phases of system development. Such 
applications shouldn’t be considered a 
separate activity, but rather an integral 
one. The greatest benefit in applying a 
formal method often comes from the pro¬ 
cess of formalizing rather than from the 
end result. Gaining a deeper understanding 
of the specificand by forcing yourself to be 
abstract yet precise about desired system 
properties can be more rewarding than 
having the specification document alone. 

Consider, for each system development 
phase, some uses of formal specifications 
and the formal methods that support them. 
(See “Further reading” for specific cita¬ 
tions.) 

Requirements analysis. Applying a for¬ 
mal method helps clarify a customer’s set 
of informally stated requirements. A spec¬ 
ification helps crystallize the customer’s 
vague ideas and reveals contradictions, 
ambiguities, and incompleteness in the re¬ 
quirements. A specifier has a better chance 
of asking pertinent questions and evaluat¬ 
ing customer responses through the use of 
a formal, rather than informal, specifica¬ 
tion. Both the customer and specifier can 
pose and answer questions based on the 
specification to see whether it reflects the 
customer’s intuition and whether the 
specificand set has the desired set of 
properties. Systems such as Kate and the 
Requirements Apprentice address the 
problem of transforming informal re¬ 
quirements into formal specifications; the 
Gist explainer addresses the converse 
problem of translating a formal specifica¬ 
tion into a restricted subset of English. 

System design. Two of the most impor¬ 
tant activities during design are decompo¬ 
sition and refinement. The Vienna Devel¬ 


opment Method (VDM), Z, Larch, and 
Lamport’s transition axiom method are 
formal methods that are especially suitable 
for system design. 

Decomposition is the process of parti¬ 
tioning a system into smaller modules. 
Specifiers can write specifications to cap¬ 
ture precisely the interfaces between these 
modules. Each interface specification pro¬ 
vides the module’s client the information 
needed to use the module without knowl¬ 
edge of its implementation. At the same 
time, it provides the module’s implement- 
er the information needed to implement the 
module without knowledge of its clients. 
Thus, as long as the interface remains the 
same, the implementation of the module 
can be replaced, perhaps by a more effi¬ 
cient one, at some later time without af¬ 
fecting its clients. 

The interface provides a place for re¬ 
cording design decisions; moreover, any 
intentional incompleteness can be captured 
succinctly as a parameter in the interface. 

Refinement involves working at differ¬ 
ent levels of abstraction, perhaps refining a 
single module at one level to be a collec¬ 
tion of modules at a lower level, or choos¬ 
ing a representation type for an abstract 
data type. Each refinement step requires 
showing that a specification (or program) 
at one level satisfies a higher level speci¬ 
fication. 

Proving satisfaction often generates ad¬ 
ditional assumptions, called proof obliga¬ 
tions, that must be discharged for the proof 
to be valid. A formal method provides the 
language to state these proof obligations 
precisely and the framework to carry out 
the proof. 

Program refinement dates back to Dijk- 
stra’s work on stepwise refinement and 
predicate transformers and Hoare’s work 
on data representation and abstraction 
functions. Related work on program trans¬ 
formation, program synthesis, and infer¬ 
ential programming have spawned the de¬ 
sign of languages like Refine and Extended 
ML, and programming environments like 
CIP-S and the Ergo Support System. These 
refinement approaches are based on clas¬ 
sical mathematical logic. An alternative 
approach to program development based 
on constructive logic gave rise to proof 
development environments like Nuprl in 
which programs are proofs and vice versa. 

System verification. Verification is the 
process of showing that a system satisfies 
its specification. Formal verification is 
impossible without a formal specification. 
Although you may never completely veri¬ 


fy an entire system, you can certainly ver¬ 
ify smaller, critical pieces. The trickiest 
part is in explicitly stating the assumptions 
about the environment in which each crit¬ 
ical piece is placed. (I elaborate on this 
point in the “Bounds of formal methods” 
section.) Systems such as Gypsy, the Hier¬ 
archical Development Method (HDM), the 
Formal Development Method (FDM), and 
m-EVES (Environment for Verifying and 
Evaluating Software) evolved as a result of 
a primary focus on program verification. 
Higher Order Logic (HOL) was originally 
developed for hardware verification. 

System validation. Formal methods can 
aid in system testing and debugging. Spec¬ 
ifications alone can be used to generate test 
cases for black-box testing. Specifications 
that explicitly state assumptions on a 
module’s use identify test cases for bound¬ 
ary conditions. 

Specifications along with implementa¬ 
tions can be used for other kinds of testing 
analysis such as path testing, unit testing, 
and integration testing. Testing based sole¬ 
ly on an analysis of the implementation is 
not sufficient; the specification must be 
taken into account. For example, a test set 
may be complete for doing a path analysis 
but may not reveal missing paths that the 
specification would otherwise suggest. The 
success of unit and integration testing de¬ 
pends on the precision of the specifications 
of the individual modules. 

Only a few formal methods have been 
developed explicitly for testing. Three ex¬ 
amples are the Data Abstraction, Imple¬ 
mentation, Specification, and Testing Sys¬ 
tem, used to test implementations of abstract 
datatypes; Kemmerer’s symbolic execution 
tool, used to generate and execute test 
cases from Ina Jo specifications; and the 
Task Sequencing Language Runtime Sys¬ 
tem, used to automatically check the exe¬ 
cution of Ada tasking statements against 
TSL specifications. 

System documentation. A specification 
is a description alternative to system im¬ 
plementation. It serves as a communica¬ 
tion medium between a client and a speci¬ 
fier, between a specifier and an implementer, 
and among members of an implementation 
team. In reply to the question “What does 
it do?” no answer is more exasperating 
than “Run it and see.” One of the primary 
intended uses of formal methods is to cap¬ 
ture the “what” in a formal specification 
rather than the “how.” A client can then 
simply read the specification rather than 
read the implementation or worse, execute 
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the system, to find out the system’s 
behavior. 

System analysis and evaluation. To learn 
from the experience of building a system, 
developers should do a critical analysis of 
its functionality and performance once it 
has been built and tested. Does the system 
do what the customer wants? Does it do it 
fast enough? If formal methods were used 
in its development, they can help system 
developers formulate and answer these 
questions. The specification serves as a 
reference point. If the customer is unhappy 
but the system meets the specification, the 
specification can be changed and the sys¬ 
tem changed accordingly. 

Indeed, much recent work in the appli¬ 
cation of formal methods to nontrivial ex¬ 
amples has been in specifying a system 
already built, running, and used. Some of 
these exercises revealed bugs in published 
algorithms and circuit designs, serious bugs 
that had gone undiscovered for years. As 
expected, most revealed unstated assump¬ 
tions, inconsistencies, and unintentional 
incompleteness in the system. 

Medium-sized systems that have been 
specified formally include VLSI circuits, 
microprocessors, oscilloscopes, operating 
systems kernels, distributed databases, and 
secure systems. Most formal methods have 
not yet been applied to specifying large- 
scale software or hardware systems; most 
are still inadequate to specify many impor¬ 
tant behavioral constraints beyond func¬ 
tionality, for example, fault-tolerance and 
real-time performance. 


This problem of scale exists in two, 
often confused dimensions: size of the 
specification and complexity of the 
specificands. Tools can help address spec¬ 
ification size, since managing large speci¬ 
fications is just like managing other large 
documents (such as programs, proofs, and 
test suites) and their structural interrela¬ 
tionships. 

The problem of dealing with a specifi- 
cand’s inherent complexity remains. Sys¬ 
tem complexity results from internal com¬ 
plexity and/or interface complexity. For 
example, an optimizing compiler is inter¬ 
nally more complex than a nonoptimizing 
one for the same language, yet, in princi¬ 
ple, they both provide the same simple 
interface to their clients (for example, 
“compile program_name”). By providing 
a systematic way to think and reason about 
specificands, formal methods can help 
people grapple with both kinds of system 
complexity. 

Characteristics. A formal method’s 
characteristics, such as whether its lan¬ 
guage is graphical or whether its underly¬ 
ing logic is first-order, influence the style 
in which a user applies it. This article is not 
intended to give a complete taxonomy of 
all possible characteristics of a method nor 
to classify exhaustively all methods ac¬ 
cording to these characteristics. Instead, I 
give a partial listing of characteristics, noting 
that a method typically reflects a combi¬ 
nation of many different ones. (See “Fur¬ 
ther reading” for citations of the methods 
mentioned.) 


Model- versus property-oriented. Two 
broad classes of formal methods are called 
model-oriented and property-oriented. 
Using a model-oriented method, a specifi¬ 
er defines a system’s behavior directly by 
constructing a model of the system in terms 
of mathematical structures such as tuples, 
relations, functions, sets, and sequences. 
Using a property-oriented method, a spec¬ 
ifier defines the system’s behavior indi¬ 
rectly by stating a set of properties, usually 
in the form of a set of axioms, that the 
system must satisfy. 

A specifier following a property-orient¬ 
ed method tries to state no more than the 
necessary minimal constraints on the sys¬ 
tem’s behavior. The fewer the properties 
specified, the more the possible implemen¬ 
tations that will satisfy the specification. 

Model-oriented methods for specifying 
the behavior of sequential programs and 
abstract data types include Parnas’ state- 
machines, Robinson and Roubine’s exten¬ 
sions to them with V-, O-, and OV-func- 
tions, VDM, and Z. Methods for specifying 
the behavior of concurrent and distributed 
systems include Petri nets, Milner’s Calcu¬ 
lus of Communicating Systems, Hoare’s 
Communicating Sequential Processes, 
Unity, I/O automata, and TSL. The Raise 
Project represents more recent work on 
combining VDM and CSP. 

Property-oriented methods can be bro¬ 
ken into two categories, sometimes referred 
to as axiomatic and algebraic. Axiomatic 
methods stem from Hoare’s work on proofs 
of correctness of implementations of ab¬ 
stract data types, where first-order predi¬ 
cate logic preconditions and postconditions 
are used for the specification of each op¬ 
eration of the type. Iota, OBJ, Anna, and 
Larch are example specification languages 
that support an axiomatic method. 

In an algebraic method, data types and 
processes are defined to be heterogeneous 
algebras. This approach uses axioms to 
specify properties of systems, but the axi¬ 
oms are restricted to equations. Much work 
has been done on the algebraic specifica¬ 
tion of abstract data types, including the 
handling of error values, nondeterminism, 
and parameterization. The more widely 
known specification languages that have 
evolved from this work are Clear and Act 
One (Algebraic Specification Techniques 
for Correct and Trusty Software Systems). 

Property-oriented methods for specify¬ 
ing the behavior of concurrent and distrib¬ 
uted systems include extensions to the 
Hoare-axiom method, temporal logic, and 
Lamport’s transition axiom method. The 
Language of Temporal Ordering of Speci- 
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fications (LOTOS) specification language 
represents more recent work on the combi¬ 
nation of Act One and CCS (with some 
CSP influence). 

Visual languages. Visual methods in¬ 
clude any whose language contains graph¬ 
ical elements in their syntactic domains. 
The most prominent visual method is Petri 
nets and its many variations, used most 
typically to specify the behavior of con¬ 
current systems. 

More recent visual language work in¬ 
cludes Harel’s state charts based on hi- 
graphs, used to specify state transitions in 
reactive systems. Figure 3 gives a simple 
example of a state chart that describes the 
behavior of a one-slot buffer. Rounded 
rectangles (“roundtangles”) represent states 
in a state machine and arrows represent 
state transitions. Initially, the one-slot buffer 
is empty. If a message arrives and is put in 
the buffer, the buffer becomes full; when 
the message has been serviced and re¬ 
moved from the buffer, its state changes 
back to being empty. 

The example shows one of the more 
notable features of state charts that distin¬ 
guish them from “flat” state-transition di¬ 
agrams: A roundtangle can represent a hi¬ 
erarchy of states (and, in general, an arrow 
can represent a set of state transitions), 
thereby letting users zoom in and out of a 
system and its subsystems. 

Harel’s higraph notation inspired the 
design of the Miro visual languages, which 
specify security constraints. Like state 
charts, the Miro languages have a formally 
defined semantics and tool support. 

Many informal methods use visual nota¬ 
tions. These methods allow the construc¬ 
tion of ambiguous specifications, perhaps 
because English text is attached to the 
graphical elements or because multiple 
interpretations of a graphical element 
(usually different meanings for an arrow) 
are possible. Many popular software and 
system design methods such as Jackson’s 
method, Hierarchy-Input-Processing-Out¬ 
put (HIPO), Structured Design, and Soft¬ 
ware Requirements Engineering Method¬ 
ology are examples of semiformal methods 
that use pictures. 

Executable. Some formal methods sup¬ 
port executable specifications, specifica¬ 
tions that can run on a computer. An exe¬ 
cutable specification language is by 
definition more restricted in expressive 
power than a nonexecutable language be¬ 
cause its functions must be computable 
and defined over domains with finite rep¬ 


resentations. As long as users realize that 
the specification may suffer from imple¬ 
mentation bias, executable specifications 
can play an important role in the system 
development process. Specifiers can use 
them to gain immediate feedback about the 
specification itself, to do rapid prototyping 
(the specification serves as a prototype of 
the system), and to test a specificand through 
symbolic execution of the specification. 
For example, the Statemate tool lets users 
run simulations through the state transition 
diagram represented by a state chart. 

Besides state charts, executable specifi¬ 
cation languages include OBJ; Prolog, a 
logic programming language that when used 
in a property-oriented style lets specifiers 
state logical relations on objects; and Pais¬ 
ley, a model-oriented language, based on a 
model of event sequences and used to 
specify functional and timing behavioral 
constraints for asynchronous parallel 
processes. 

Tool-supported. Some formal methods 
evolved from the semantic-analysis tools 
that were built to manipulate specifica¬ 
tions and programs. Model-checking tools 
let users construct a finite-state model of 
the system and then show a property holds 
of each state or state transition of the sys¬ 
tem. Tools such as Extended Model Checker 
(EMC) are especially useful for specifying 
and verifying properties of VLSI circuits. 

Proof-checking tools that let users treat 
algebraic specifications as rewrite rules 
include Affirm, Reve, the Rewrite Rule 
Laboratory, and the Larch Prover. Tools 
(and their associated specification lan¬ 
guages) that handle subsets of first-order 
logic include the Boyer-Moore Theorem 
Prover (and the Gypsy specification lan¬ 
guage), FDM (Ina Jo), HDM (Special), and 
m-EVES (m-Verdi). Finally, tools that 
handle subsets of higher order logics in¬ 
clude HOL, LCF, and OBJ. 

Some examples 

This section illustrates six well-known 
or commonly used formal methods, half 
applied to one simple example and the 
other half applied to another example. All 
six methods have been used to specify 
much more complex systems. 

Sometimes, when specifying the same 
problem using different methods, the re¬ 
sulting specifications look remarkably 
similar (as in the first three examples), and 
sometimes they don’t (as in the last three). 
The similarity or difference is sometimes 


attributable to the nature or simplicity of 
the specificand and sometimes to the meth¬ 
ods themselves. 

The choice of a method is likely to affect 
what a specification says and how it is said. 
A method’s guidelines may encourage the 
specifier to be explicit about some system 
behaviors (for example, state changes) and 
not others (for example, error handling). 
Syntactic conventions (such as indentation 
style), special notation (vertical and hori¬ 
zontal lines), and keywords affect a speci¬ 
fication’s physical appearance and its 
readability. 

Most proponents of methods used pri¬ 
marily to specify behavioral properties of 
concurrent and distributed systems have 
carefully defined the satisfies relation for a 
given semantic domain. Many of their 
methods lack the niceties — the syntactic 
sugar and software support tools — that 
formal methods for sequential systems 
provide. For some theories or models of 
concurrent and distributed systems, more 
user-friendly specification languages 
(LOTOS and Raise) are beginning to 
appear. 

Abstract data types: Z, VDM, Larch. 

Z, a formal method based on set theory, can 
be used in both model-oriented and proper¬ 
ty-oriented styles. Figure 4 gives a model- 
oriented specification of a symbol table, 
following the Z notation of Spivey. 6 The 
state of the table is modeled by a partial 
mapping from keys to values (X Y 
denotes a set of partial mappings from set 
X to set Y\ a partial mapping relates each 
member of X to at most one member of Y). 
By convention, unprimed variables in Z 
stand for the state before an operation is 
performed and primed variables for the 
state afterwards. I will use the same con¬ 
vention in the VDM and Larch speci¬ 
fications. 

The table contains four operations: INIT, 
INSERT, LOOKUP, and DELETE. INIT 
initializes the symbol table st to be empty. 
INSERT modifies the table by adding a 
new binding to st, in the case the key k is 
not already in the domain of st. LOOKUP 
requires that the key k be in the domain of 
the mapping, returns the value to which k is 
mapped, and does not change the state of 
the symbol table ( st' = st). DELETE also 
requires that the key k be in the domain of 
the mapping and modifies the table by 
deleting the binding associated with k from 
st (-3 is a domain subtraction operator). 
The proof checker B has been used to prove 
theorems based on Z specifications. 

VDM supports a model-oriented speci- 
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ST = KEY +» VAL 

INIT- 

st': ST 


st' = {} 


INSERT- 

st, st': ST 
k: KEY 
v: VAL 


k t dom(st) a 
st' = st u {k i->v} 


LOOKUP — 
st, st': ST 
k: KEY 
v': VAL 


k g dom(st) a 
v' = st(k) a 
st' = st 


DELETE- 

st, st': ST 
k: KEY 


k g dom(st) a 
st' = {k}o st 


Figure 4. Z specification of a symbol 
table. 


fication style and defines a set of built-in 
data types (such as sets, lists, and map¬ 
pings), which specifiers use to define other 
types. 

The VDM specification in Figure 5 de¬ 
fines a symbol table also in terms of a 
mapping from keys to values. I follow the 
VDM notation given in Jones. 7 The be¬ 
havior of the INIT, INSERT, LOOKUP, 
and DELETE operations are the same as 
specified in the Z specification. However, 


ST = map Key to Val 
INIT() 

ext wr st : ST 
post st' = {} 

INSERT) k : Key,v : Val) 
ext wr st : ST 
pre k i dom st 
post st' = st [k v) 

LOOKUP) k\ Key)v : Val 
ext rd st: ST 
pre k e dom st 
post v' = st(k) 

DELETE) k : Key) 
ext wr st: ST 
pre k g dom st 
post st' = {k} < st 


Figure 5. VDM specification of a sym¬ 
bol table. 


the preconditions, specified in pre clauses 
are made explicit and separate from the 
postconditions, specified in post clauses. 

A precondition on an operation is a pred¬ 
icate that must hold in the state on each 
invocation of the operation; if it does not 
hold, the operation’s behavior is unspeci¬ 
fied. A postcondition is a predicate that 
holds in the state upon return. An opera¬ 
tion’s clients are responsible for satisfying 
preconditions, and its implementer is re¬ 
sponsible for guaranteeing the postcondi¬ 
tion. 

The fact that LOOKUP does not modify 
the symbol table (hence st' = st) but IN¬ 
SERT and DELETE do is specified by 
using rd (for read-only access) instead of 
wr (for write-and-read access) in the dec¬ 
laration of the external state variables ac¬ 
cessed by each operation. 

Larch is a property-oriented method that 
combines both axiomatic and algebraic 
specifications into a two-tiered specifica¬ 
tion. 8 The axiomatic component specifies 
state-dependent behavior (for example, side 
effects and exceptional termination) of 
programs. The algebraic component spec¬ 
ifies state-independent properties of data 
accessed by programs. Figure 6 shows a 
Larch specification of the symbol table 
example. I follow the Larch notation given 
in Guttag et al. 4 

The first piece of the Larch specifica¬ 
tion, called an interface specification, looks 


similar to the Z and VDM specifications. 
For each operation, the requires and en¬ 
sures clauses specify its pre- and postcon¬ 
ditions. The modifies clause lists those 
objects whose value may possibly change 
as a result of executing the operation. Hence, 
LOOKUP is not allowed to change the 
state of its symbol table argument, but 
INSERT and DELETE are. 

One difference (not shown in the exam¬ 
ple) between Larch and VDM (and Larch 
and Z) is that, if the target programming 
language supports exception handling, the 
interfaces would specify whether and un¬ 
der what conditions an operation signals 
exceptions. For example, we could remove 
INSERT’S requires clause and instead use 
a special signals clause in its postcondition 
to specify that a signal should be raised in 
the case that the key k is already in the 
symbol table. 

The second piece of the Larch specifica¬ 
tion, called a trait, looks like an algebraic 
specification. It contains a set of function 
symbol declarations and a set of equations 
that define the meaning of the function 
symbols. The equations determine an 
equivalence relation on sorted terms. Ob¬ 
jects of the symbol_table data type speci¬ 
fied in the interface specification range 
over values denoted by the terms of sort S. 

The generated by clause states that all 
symbol table values can be represented by 
terms composed solely of the two function 
symbols, emp and add. This clause defines 
an inductive rule of inference and is useful 
for proving properties about all symbol 
table values. 

The partitioned by clause adds more 
equivalences between terms. Intuitively, it 
states that two terms are equal if they can¬ 
not be distinguished by any of the functions 
listed in the clause. In the example, we 
could use this property to show that order 
of insertion of distinct key-value pairs in 
the symbol table does not matter, that is, 
insertion is commutative. 

The exempting clause documents the 
absence of right sides of equations for 
rem(emp) and find(emp); the requires and 
signals clauses in the interface specifica¬ 
tion deal with these “error values.” The 
converts and exempting clauses together 
provide a way to state that this algebraic 
specification is sufficiently complete. 

Syntax analyzers exist for Larch traits 
and interfaces. The Larch Prover has been 
used to perform semantic analysis on Larch 

The user-defined function symbols in a 
Larch trait are exactly those used in the 
pre- and postconditions of the interface 
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specification; they serve the same role as 
the built-in symbols like u and < used in 
the Z and VDM specifications. 

Unlike Z and VDM, Larch does not 
come with any special built-in notation nor 
with any built-in types. The advantage is 
that the user does not have to learn any 
special vocabulary for those concepts and 
is free to introduce whatever symbols he or 
she desires, giving them the exact meaning 
suitable for the specificand set. Exactly 
those properties of a data type being spec¬ 
ified need be stated explicitly and satisfied 
by an implementation. 

The disadvantage is that the user may 
often need to provide a large set of user- 
defined symbols, as well as the equations 
that define their meaning. Since I modeled 
symbol tables in Z and VDM in terms of 
finite mappings, I did not need to state 
explicitly that insertion is commutative. 
This is a property of mappings — the 
commutative property came for free. The 
Larch handbook 4 serves as a compromise 
between the two extremes in that it pro¬ 
vides a library of traits that define many 
general and commonly used concepts (for 
example, properties of finite mappings, 
partial orders, sets, and sequences). 

Concurrency: Temporal logic, CSP, 
transition axioms. As mentioned before, 
many formal methods for specifying the 
behavior of concurrent and distributed sys¬ 
tems differ because of their choice in se¬ 
mantic domain. Some focus on just the 
states, some on just the events, and some 
on both. To be more concrete here, I will 
model a system’s behavior as a set of linear 
sequences of states and associated events. 
An alternative approach, used by CCS and 
EMC, is to model a system’s behavior as a 
set of trees of states and associated events. 
When a specification is interpreted with 
respect to sets of sequences, separating 
properties of concurrent and distributed 
systems into two general categories, safety 
and liveness, is common. Safety properties 
(“nothing bad ever happens”) include 
functional correctness, and liveness prop¬ 
erties (“something good eventually hap¬ 
pens”) include termination. 

Temporal logic is a property-oriented 
method for specifying properties of con¬ 
current and distributed systems. For a giv¬ 
en temporal logic inference system, spe¬ 
cial modal operators concisely state 
assertions about system behavior. Specifiers 
use these operators to refer to past, current, 
and future states (or events). 

There is no one standard temporal logic 
inference system nor one standard set of 


symbol_table is data type based on S from SymTab 

init = proc () returns (s: symbol_table) 
ensures s' = emp a new (s) 

insert = proc (s: symbol_table,k: key,v: val) 
requires ~ isin(s,k) 
modifies (s) 
ensures s' = add(s,k,v) 

lookup = proc (s: symbol_table,k : key) returns (v: val) 
requires isin(s, k) 
ensures v'= find(s,k) 

delete = proc (s: symbol_table, k : key) 
requires isin(s,k) 
modifies (s) 
ensures s' = rem(s,k) 

end symbol_table 

SymTab: trait 
introduces 

emp: —> S 
add: S,K,V -» S 
rem: S,K -> S 
find: S,K -> V 
isin: S,K -» Bool 

asserts 

S generated by (emp, add) 

S partitioned by (find, isin) 
for all (s: S,k,kl : K,v : V) 

rem(add(s,k,v),kl) == if k = kl then s else add(rem(s,kl),k,v) 
find(add(s,k,v),kl) == if k = kl then v else find(s,kl) 
isin(emp,k) == false 

isin(add(s,k,v),kl) == (k = kl) v isin(s,kl) 

implies 

converts (rem,find,isin) exempting (rem(emp),find(emp)) 
end SymTab 


Figure 6. Larch specification of a symbol table. 


operators. Modal operators commonly used 
are □, O, and O . Informally, when inter¬ 
preted with respect to a sequence of states, 
□ P says that in all future states, the state 
predicate P holds; OP says that in some 
future state, P will hold; and OF says that 
in the next state P will hold. For example, 
P=>OQ says that if P holds in the current 
state, Q will eventually hold. Temporal 
logic notation tends to be terse, and a tem¬ 
poral logic specification is simply an 
unstructured set of predicates, all of which 
must be satisfied by a given implementa- 


Figure 7 presents a temporal logic spec¬ 
ification of the behavior of an unbounded 
buffer in an asynchronous environment. 
The example is adapted from Koymans et 
al., 9 using the temporal logic system in 
Pnueli, 10 which has 12 modal operators. 
The formulas are interpreted with respect 
to sequences of events. A buffer has a left 
input channel and a right output channel. 
The expression <c\m> denotes the event of 
placing message m on channel c. The first 
predicate, 

(rightlm) => 0(left!m) 
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(rightlm) =>$ (leftlm) 

(1) 

((rightlm) a© 0 (rightlm')) ((leftlm) a ©0 (leftlm')) 

(2) 

((leftlm) a ©0 (leftlm')) => (m * m) 

(3) 

((leftlm)) =>0 ((rightlm)) 

(4) 


Figure 7. Temporal logic specification of an unbounded buffer. 


states that any message transmitted to the 
right channel (<right!m>) must have been 
previously placed on the left channel 
(0<left!m>). The second predicate, 

((right!m) a ©0 (rightlm')) 

=>$«left!ro>A©$(left!m'» 
states that messages are transmitted first 
in, first out. If message m placed on the 
output channel is preceded by some other 
message m' also on the output channel ( © 0 
<right!m'>), there must have been a pre¬ 
ceding (the second $) event of placing m 
on the input channel (cleft I m>) and, 
moreover, an even earlier event that placed 
m' on the input channel ahead of m( © 0 
cleft!m'>). The third predicate, 

((leftlm) a © $(left!m')) =* (m * m') 

states that all messages are unique. For 
each message m currently placed on the 
input channel and for each previously placed 
message m ( © 0 cleft !m'>), m and m' are 
not equal. This property is not a property of 
the buffer, but an assumption of the envi¬ 
ronment. This assumption is essential to 
the validity of the specification. Without it, 
a buffer that outputs duplicate copies of its 
input would be considered correct. 

Whereas the first three predicates state 
safety properties of the system (and its 
environment), the fourth predicate. 


«left!m» => 0 «right!m» 

states a liveness property: Each incoming 
message will eventually be transmitted. 

CSP uses a model-oriented method for 
specifying concurrent processes and a 
property-oriented method for stating and 
proving properties about the model. CSP is 
based on model of traces, or event se¬ 
quences, and assumes that processes com¬ 
municate by sending messages across 
channels. Processes synchronize on events 
so the event of sending output message m 
on named channel c is synchronized with 
the event of simultaneously receiving an 
input message on c. Figure 8 gives a CSP 
specification of an unbounded buffer 
(adapted from Hoare"). BUFFER itself is 
specified to be a process P that acts as an 
unbounded buffer. The recursive defini¬ 
tion of P is divided into two clauses to 
handle the empty and non-empty cases. 
The first clause, 

P K> = left?m —> P <m> 

says that if the buffer is empty, in the event 
that there is a message m on the left channel 
(left?m), it will input it. In CSP, if x is an 
event and P is a process, the notation 
x -* P denotes a process that first engages 
in the event x and then behaves exactly as 
described by P. The second clause, 


P<m >*s = (left?!! -> P <m >*sA <n> 

I rightlm —> P s ) 

says that if the buffer is non-empty, then 
either the buffer will input another mes¬ 
sage n from the left channel, appending it 
to the end of the buffer, or output the first 
message in the buffer to the right channel. 
CSP uses s't to denote the concatenation of 
sequence s to sequence t. It uses I to denote 
choice: If x and y are distinct events, 
x —» Ply —> Q describes a process that ini¬ 
tially engages in either* or y. After this first 
event, subsequent behavior is described by 
P, if the first event was x, and by Q, if the 
first event was y. 

In CSP’s formalism, BUFFER is a CSP 
program; you can state and prove proper¬ 
ties about the traces it denotes. Using alge¬ 
braic laws on traces, you can formally 
verify that a given CSP program satisfies a 
specification on traces. The last line in 
Figure 8 states that BUFFER describes a 
set of traces, each of which satisfies the 
predicate given on the right side of sat. The 
predicate’s first conjunct says that the se¬ 
quence of (output) messages on the right 
channel is a prefix of the sequence of (in¬ 
put) messages on the left channel. CSP 
uses the notation s < t to denote that the 
sequence s is a prefix of sequence t. The 
prefix property of sequences guarantees 
that only messages sent from the left will 
be delivered to the right, only once, and in 
the same order. The second conjunct says 
that the process never stops: it cannot refuse 
to communicate on either the right or left 
channel. This implies that input messages 
will eventually be delivered, which is the 
same property as stated in the temporal 
logic specification’s fourth predicate. 

B, previously mentioned for proving 
theorems from Z specifications, has also 
been used to prove properties of CSP spec¬ 
ifications. Occam is a programming lan¬ 
guage derivative of CSP that has been 
implemented and used on Transputers. 

Lamport’s transition axiom method 
combines an axiomatic method for de¬ 
scribing the behavior of individual opera¬ 
tions with temporal logic assertions for 
specifying safety and liveness properties. 
In the buffer example of Figure 9 (adapted 
from Lamport 12 ), I use his original nota¬ 
tion, although Lamport introduced two other 
notations in a more recent description of 
his method. 2 

In the example, the functions, buffer, 
parg, and gval define the state of the buffer, 
which has two operations, PUT and GET, 
and an initial size of 0. For this example, 
we assume that invocations of different 


BUFFER = P <> 

where P <> = left?m —> P <m> 
and P <m> ,, = (left?n -> P <m>v<n> I rightlm -> Ps) 

BUFFER sat (right < left) a (if right = left then left g ref else right £ ref) 


Figure 8. CSP program and specification of an unbounded buffer. 
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module BUFFER with subroutines PUT, GET 

state functions: 

buffer : sequence of message 
parg : message or NULL 
gval : message or NULL 

initial conditions: 

\buffer\ = 0 

safety properties 

1. (a) cit(PUT) => parg = PUT.PAR 
(b) afteii PUT) => parg = NULL 

2. (a) at(GET) => gval = NULL 

(b) afteii GET) => GET. PAR = gval 

3. allowed changes to buffer 

parg when m(PUT) 
gval when m(GET) 

(a) a[ BUFFER] :/'n(PUT) a parg * NULL 

parg' = NULL a buffer' = buffer * parg 

(b) oc[BUFFER]:m(GET) a gval = NULL a \buffer\> 0 -> 

gval' * NULL a buffer = gval’ * buffer 

liveness properties 

4. in(PUT) a \buffer\< min a//er(PUT) 

5. m(GET) a I buffer\> 0 after(GET) 


Figure 9. Transition axiom specification of an unbounded buffer. 


operations can be active concurrently, but 
at most one invocation of a given operation 
can be active at once. 

The predicates at(OP), in(OP), and 
after{OP ) state whether control is at the 
point of calling the operation OP, within the 
execution of OP, or at the point of return 
from OP. 

The first pair of safety properties states 
that the value of the state function parg is 
equal to the input parameter to PUT at the 
time of call and equal to NULL upon return. 

The second pair states similar properties 
for GET. The third pair of properties indi¬ 
cates how the state functions change as a 
result of executing PUT and GET: If con¬ 
trol is in PUT, buffer gets updated by 
appending the non-NULL message to its 
end; if control is in GET and the buffer is 
non-empty, buffer gets updated by remov¬ 
ing its first message, which is GET’s return 
value gval. (The * denotes appending an 
element to a sequence.) 

The fourth and fifth properties are live¬ 
ness properties requiring that PUT return 
whenever there are fewer than min mes¬ 
sages in the buffer and that GET return 
whenever the buffer is non-empty. (The 
temporal logic operator stands for 
“leads to.”) These requirements ensure that 
progress is made, that once control is with¬ 
in the PUT (or GET) operation, control 
will reach its corresponding return point. 
The fifth implies that messages received 
(through PUT) are eventually transmitted 
(through GET) since, if control is in GET, 
it must eventually return. 

Unlike the temporal logic and CSP ex¬ 
amples — but like the Z, VDM, and Larch 
examples — the last example uses key¬ 
words and distinct clauses for highlighting 
a model of state (state functions), state 
initialization (initial conditions), and state 
changes (allowed changes to). Again, un¬ 
like the temporal logic and CSP examples, 
it uses similar notational conveniences to 
highlight synchronization conditions (the 
enabling predicates to the left-hand side of 
—») and safety and liveness constraints on 
the processes’ behaviors. Hence, this last 
example shows a combination of linguistic 
features borrowed from formal methods 
used to specify sequential programs and 
others used to specify concurrent ones. 

Bounds of formal 
methods 

Between the ideal and real worlds. 

Formal methods are based on mathematics 
but are not entirely mathematical. Formal- 


methods users must acknowledge the two 
important boundaries between the mathe¬ 
matical world and the real world. 

Users cross the first boundary in codify¬ 
ing the customer’s informally stated re¬ 
quirements. Figure 10 illustrates this map¬ 
ping, where the cloud symbolizes the 
customer’s informal requirements and the 
oval symbolizes a formal specification of 
them. 

This mapping from informal to formal is 
typically achieved through an iterative 
process not subject to proof. A specifier 
might write an initial specification, discuss 
its implications with the customer, and 
revise it as a result of the customer’s feed¬ 
back. 

At all times, the formal specification is 
only a mathematical representation of the 
customer’s requirements. On one hand, 
any inconsistencies in the requirements 
would be faithfully preserved in the spec¬ 
ifier’s mapping. On the other, the specifier 
might incorrectly interpret the requirements 


and formally characterize the misinterpre¬ 
tation. For these reasons, it is important 
that specifiers and customers interact. 

Specifiers can help customers clarify 
their fuzzy, perhaps contradictory, notions; 
customers can help specifiers debug their 
specifications. The existence of this 
boundary should not be surprising because 
people use formal methods. 

The second boundary is crossed in the 
mapping from the real world to some ab¬ 
stract representation of it. Figure 11 illus¬ 
trates this mapping, where the cloud sym¬ 
bolizes the real world and the oval 
symbolizes an abstract model of it. 

The formal specification language en¬ 
codes this abstraction. For example, a for¬ 
mal specification might describe proper¬ 
ties of real arithmetic, abstracting away 
from the fact that not all real numbers can 
be represented in a computer. The formal 
specification is only a mathematical ap¬ 
proximation of the real world. This bound¬ 
ary is not unique to formal methods or 
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Figure 10. Mapping informal require¬ 
ments for a formal specification. 


computer science in general; it is ubiqui¬ 
tous in all fields of engineering and applied 
mathematics. 

Assumptions about the environment. 

Another kind of boundary is often neglect¬ 
ed, even by experienced specifiers. It’s the 
boundary between a real system and its 
environment. A system does not run in 
isolation; its behavior is affected by input 
from the external world, which in turn 
consumes the system’s output. 

Given that you can formally model the 
system (in terms of a specification lan¬ 
guage’s semantic domain), then, if you can 
formally model the environment, you can 
formally characterize the interface between 
a system and its environment. Most formal 
methods leave the environment’s specifi¬ 
cation (formal or otherwise) outside the 
system’s specification. An exception is the 
Gist language used to specify closed sys¬ 
tems. In theory, a complete Gist specifica¬ 
tion includes not only a description of the 
system’s behavior, but also of its clients 
and other environmental factors like hard- 

A system’s behavior as captured in its 
specification is conditional on the environ¬ 
ment’s behavior: 

Environment => System 

This implication says that if the environ¬ 
ment satisfies some precondition. Envi¬ 
ronment, then the system will behave as 
specified in System. If the environment 
fails to satisfy the precondition, then the 
system is free to behave in any way. 

Environment is a set of assumptions. 



Figure 11. Mapping the real world to 
an abstract model. 


Whereas a system specifier places con¬ 
straints on the system’s behavior, the spec¬ 
ifier cannot place constraints on the envi¬ 
ronment but can only make assumptions 
about its behavior. For example, in the 
temporal logic specification of the un¬ 
bounded buffer, the assumption that mes¬ 
sages are unique is an obligation the envi¬ 
ronment is expected to satisfy, not a property 
the buffer is expected to satisfy nor a con¬ 
straint the system specifier can place on the 
environment. 

A specifier often makes implicit as¬ 
sumptions about a system’s environment 
when specifying something like a proce¬ 
dure in a programming language because 
the environment is usually fixed or at least 
well-defined. 

A procedure’s environment is defined in 
terms of the programming language’s in¬ 
vocation protocol. A procedure’s specifi¬ 
cation will typically omit explicit mention 
of the language’s parameter passing mech¬ 
anism, or, for a compile-time type-checked 
language, that the argument types are cor¬ 
rect. The specifier presumably knows the 
details of the programming language’s pa¬ 
rameter-passing mechanism and assumes 
the programmer will compile the proce¬ 
dure, thereby doing the appropriate type 
checking. 

However, when specifying a large, com¬ 
plex software or hardware system, the 
specifier should take special care to make 
explicit as many assumptions about the 
environment as possible. Unfortunately, 
when specifying a large system, specifiers 
too often forget to explicitly state the cir¬ 
cumstances under which the system is ex¬ 
pected to behave properly. 


In reality, it is impossible to formally 
model many environmental aspects such 
as unpredictable or unanticipated events, 
human error, and natural catastrophes 
(lightning, hurricanes, earthquakes). Haz¬ 
ard analysis, as a complementary tech¬ 
nique to formal methods, can identify a 
system’s safety-critical components. For¬ 
mal methods can then be used to describe 
and reason about these components, where 
reasoning holds only for those system in¬ 
put parameters that are made explicit. 


I n a strict mathematical sense, formal 
methods differ greatly from one an¬ 
other. Not only does notation vary, 
but the choice of the semantic domain and 
definition of the satisfies relation both make 
a tremendous difference between what a 
specifier can easily and concisely express 
in one method versus another. An idiom in 
one language might translate into a long 
list of unstructured statements in another 
or might not even have a counterpart. 

But, in a more practical sense, formal 
methods do not differ radically from one 
another. Within some well-defined mathe¬ 
matical framework, they let system devel¬ 
opers couch their ideas precisely. The more 
rigor applied in system development, the 
more likely developers are to state require¬ 
ments correctly and to get the design right 
and, of course, the more precisely they can 
argue the correctness of the implementa¬ 
tion. 

In conclusion, existing formal methods 
can be used to 

• identify many, though not all, defi¬ 
ciencies in a set of informally stated 
requirements, detect discrepancies be¬ 
tween a specification and an imple¬ 
mentation, and find errors in existing 
programs and systems; 

• specify medium-sized and nontrivial 
problems, especially the functional 
behavior of sequential programs, ab¬ 
stract data types, and hardware; and 
• provide a deeper understanding of the 
behavior of large, complex systems. 
Many challenges remain. In an effort to 
push against some of the current pragmatic 
bounds (in contrast to the two theoretical 
bounds covered in the previous section), 
the formal methods community is actively 
pursuing the following goals: 

• specifying nonfunctional behavior such 
as reliability, safety, real time, performance, 
and human factors; 

• combining different methods, such as 
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a domain-specific one with a more general 
one, or an informal one with a formal one; 

• building more usable and more robust 
tools, in particular tools to manage large 
specifications and tools to perform more 
complicated semantic analysis of specifi¬ 
cations more efficiently, perhaps by ex¬ 
ploiting parallel architectures and parallel 
algorithms; 

• building specification libraries so sys¬ 
tems and their components can be reused 
based on information captured in their 
specification (general libraries, like the 
Larch handbook 4 and the Z mathematical 
toolkit, 6 and domain-specific ones like that 
for oscilloscopes, are recent examples); 

• integrating formal methods with the 
entire system development effort, for ex¬ 
ample, to provide a formal way to record 
design rationale in the system develop¬ 
ment process; 

• demonstrating that existing techniques 
scale up to handle real-world problems and 
to scale up the techniques themselves; and 

• educating and training more people in 
the use of formal methods. ■ 
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Tango: A Framework and 
System for Algorithm 
Animation 


John T. Stasko 

Georgia Institute of Technology 


C omputer programs are often diffi¬ 
cult to understand when viewed in 
their traditional textual form. In 
fact, the text representation can obscure a 
program’s functionality. Animated graph¬ 
ical views of a program better convey its 
meaning, methodology, and purpose. Ani¬ 
mated views help three central program¬ 
ming activities: 

(1) Understanding programs. Animated 
visualizations help explain the inner work¬ 
ings of programs and are useful instruc¬ 
tional tools for teaching computer science. 

(2) Evaluating existing programs. An¬ 
imated visualizations help programmers 
monitor system performance. For exam¬ 
ple, an animated view of certain operating 
system components could illustrate when 
bottlenecks occur, and a view of a job 
queue could allow easier detection of 
deadlock conditions. Animated views also 
make it easier to compare the performance 
of related programs. 

(3) Developing new programs. Animated 
visualizations help researchers and de¬ 
signers debug programs and explore new 
variants of existing algorithms. The graph¬ 
ical views of a program illustrate behaviors 
and characteristics not evident during its 


Programmers can more 
easily understand 
programs displayed in 
an animated graphical 
way. This article 
introduces a 
framework for 
algorithm animation 
and a system based on 
that framework. 


initial design. Consequently, they promote 
the discovery of alternative solutions to 
problems. 

Algorithm animation is the process of 
abstracting a program’s data, operations, 
and semantics, and creating dynamic 


graphical views of those abstractions. It 
encompasses program animation and data- 
structure rendering, which typically involve 
one-to-one mappings between program data 
and the animation images. However, algo¬ 
rithm animation is broader than these two 
areas and involves program views that go 
beyond simple data-structure presentations. 
Frequently, the animation images have no 
direct correspondence to the program’s data 
or execution units, but instead represent 
abstractions designed to elucidate the pro¬ 
gram semantics. 

Visualizations such as those in the sec¬ 
ond item above are thought of more as 
animated simulations than as program an¬ 
imations. Although a strict definition of 
algorithm animation does not include ani¬ 
mated simulations, designers can produce 
such simulations using algorithm animation 
techniques. 

The coupling of an animation to an exe¬ 
cuting program distinguishes algorithm 
animation from other, more general types 
of animation. In an animation of an interac¬ 
tive program, the program’s runtime oper¬ 
ations and data dictate how the animation 
appears. The corresponding animated views 
must be informative and coherent, regard¬ 
less of the program’s input. Given this 
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condition, animation designers should not 
have to create a different animation routine 
for each possible program configuration. 
Therefore, algorithm animation requires 
models that support the creation of anima¬ 
tion routines that can adapt to various pro¬ 
gram states. 

To simplify animation design and pro¬ 
vide a model that supports smooth, contin¬ 
uous image movement, I have developed 
an algorithm animation framework that 
helps 

• define abstract operations or events in 
a program, 

• design animation actions to simulate 
those operations, and 

• map the abstract operations to their 
corresponding animation actions. 

I have also developed the path-transition 
paradigm for animation design. The para¬ 
digm supports the framework and is based 
on four abstract data types: locations, im¬ 
ages, paths, and transitions. The data types 
and their constituent operations provide a 
general animation-design interface re¬ 
gardless of the program being animated or 


the hardware hosting the animation. De¬ 
signers do not have to write programs and 
make low-level system-dependent graph¬ 
ics calls. Hence, animation production is 
easier and consistent throughout. 

The path-transition paradigm provides a 
simple, consistent way to define gradual 
changes or transitions in animated views. 
This lets designers describe animation be¬ 
havior at a highly detailed level. Consider 
the following comments regarding the im¬ 
portance and difficulty of smooth updates: 

Often it is even better to show smooth 
transitions between states; if a structure 
changes and the new state simply flashes on 
the screen, the viewer is typically startled and 
cannot see immediately without some mental 
effort how the new image (could have) evolved 
from the previous one. 1 

Unless a good animation package is 
provided, incremental transitions are often 
tedious and difficult to program. 2 

The path and transition data types help 
designers easily interpolate between ani¬ 
mation states. The lack of this capability in 
other systems forced their designers to 


employ snapshot image updates or hand¬ 
crafted smooth animations using underly¬ 
ing static graphics packages. 

I have also developed an algorithm an¬ 
imation system, called Tango (for “transi¬ 
tion-based animation generation”), based 
on the framework. Using Tango, program¬ 
mers can create new animations in a few 
hours or days rather than many days or 
weeks. The system supports two-dimen¬ 
sional color animations in a workstation- 
based windowing system. The images are 
sophisticated and aesthetically pleasing, 
exhibiting smooth continuous movements 
and changes. Figures 1 and 2 show super¬ 
imposed series of frames from two Tango 
animations: a bubblesort and a producer- 
consumer ring buffer. 

Tango presents an “open” system archi¬ 
tecture that is neither monolithic nor tight¬ 
ly coupled. The program being animated 
does not execute within Tango itself, so 
any program can be animated simply by 
adding algorithm operations, and Tango 
does not have to be recompiled repeatedly. 

Good animations are usually the product 
of repetitive animation design. An algo¬ 
rithm animation system should let designers 
quickly and easily modify animations to 
encourage experimentation with alternate 
views and imagery. Tango makes iterative 
design easier by separating program ab¬ 
straction from animation design and mak¬ 
ing animation actions easily and directly 
accessible. Since a program’s algorithm 
operations activate animation routines 
through external mappings, designers can 
work repetitively and directly with the code 
controlling the animation view. That is, 
Tango does not contain a middle modeling 
layer; designers work directly with ren¬ 
dering control code. These features, coupled 
with Tango’s use of dynamic loading, 
simplify animation design and shorten the 
time required to modify an animation. 

Related work 

Only a few algorithm animation systems 
exist for handling general programs not 
restricted to a particular domain. The best- 
known systems, Balsa 3 and its descendant 
Balsa-II, 24 contain an extensive library of 
sophisticated animations and have been 
used as teaching aids in introductory courses 
for more than seven years. Unfortunately, 
Balsa-II has drawbacks: it requires internal 
Macintosh coding to create new animation 
views, and the system integration is tight, 
so programs being animated must be exe¬ 
cuted in the system. 
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Figure 2. Tango animation of a producer-consumer ring buffer. 


A number of algorithm animation sys¬ 
tems have been developed using Smalltalk 
and object-oriented methods. One system 
functions within Smalltalk’s model-view- 
control paradigm, 1 but limitations prompt¬ 
ed development of a more involved system 
called Animus 5 that uses constraints (spe¬ 
cifically, temporal constraints) in Small¬ 
talk to manage animations. Another ambi¬ 
tious Smalltalk system, the Gestural 
system, 6 was supposed to let designers pro¬ 
duce animations totally by graphical dem¬ 
onstration. However, the reported proto¬ 
type was not developed beyond using simple 
black rectangles. 

The Aladdin system generates anima¬ 
tion based on a graphical specification. 7 
The designer declares graphical objects 
with attributes that can be changed over 
time by the program being animated. Alad¬ 
din differs from Balsa and Tango in that it 
supports animation code inserted directly 
into the program being animated. 

By studying these systems, I have devel¬ 
oped a set of functional requirements that 
any new algorithm animation system should 
strive to meet. The requirements do not 
comprise a strict list of features a system 
must include. They are simply my choices 
of the types of views that new systems 
should support and that are available with 
current techniques. My goal is to define 
pragmatically what constitutes an algorithm 
animation view. 

My method for specifying the require¬ 
ments involves four groups of features. 
Each group includes graphical objects and 
possible actions on those objects. Features 
in the kernel are included in most algo¬ 
rithm animation views; all systems should 
support these features. Objects in this group 
include two-dimensional black and white 
lines, rectangles, circles, and text. Most 
algorithm animations include only a subset 
of those objects. Algorithm animation’s 
symbolic nature usually requires that ob¬ 
jects undergo program-driven changes in 
position, size, visibility, and fill style. 
Additional features in the kernel include 
sequential and simultaneous multiobject 
modifications, bounding-box-oriented 
geometric alignment, simple coordinate- 
based graphical input, and relative anima¬ 
tion-speed control. 

The second group of features comprise 
the shell. Features in this group are evident 
in a handful of the previous systems; they 
are certainly desirable, but not necessary 
for most algorithm animations. Objects 
here include polylines, polygons, ellipses, 
arcs, and splines. Most workstation graph¬ 
ics and window packages allow drawing 


such objects, although algorithm anima¬ 
tions seldom involve them. Actions in the 
shell include changes in highlight or color, 
line style, line thickness, and arbitrary 
scaling and rotation. As the field matures 
and workstation technology improves, many 
of these shell features should become ele¬ 
ments of the kernel. Other shell features 
include user control of window views such 
as panning and zooming, multiple concur¬ 
rent views, and postexecution forward and 
reverse playback of varying speed. 

The features in the third group, the fringe, 
may be evident in a particular isolated 
view in some system; they are simply ex¬ 
isting features not included in the kernel 
and shell groups. 

The last group, the future, contains fea¬ 
tures that are beyond either current hard¬ 
ware technology or current research, such 
as 

• Real-time control. Designers should be 
able to specify the exact duration of actions 
and motions. 

• Arbitrary geometric alignment and 
collision detection. It should be easier to 


make graphical objects account for the 
positions and movements of other objects. 
Designers should be able to create object- 
to-object relationships and constraints for 
such objects as concave polygons. 

• Mapping the animation to its driving 
program. Graphically manipulating the 
animation view should allow users to mod¬ 
ify their programs’ data and execution. 
This ability resembles visual programming. 

• Three-dimensional graphics. Design¬ 
ers should be able to create and display 
three-dimensional algorithm animations 
simply. 

Conceptual framework 

Although prior work has shown that al¬ 
gorithm animation is useful, the lack of a 
strong conceptual, systematic approach is 
a major drawback. My goal is to develop a 
clean, powerful, and flexible algorithm 
animation system with formal models and 
precise semantics. To meet this goal, I 
have developed a framework with three 
primary components (see Figure 3). Be- 
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Figure 3. The algorithm-animation framework. 


cause an algorithm animation is a dynamic 
visualization of a program’s data and oper¬ 
ations, the framework contains algorithm 
and animation components. Also, since 
algorithm animation is a specialized simu¬ 
lation or view of a program’s abstract pro¬ 
cesses, the framework contains a mapping 
from the algorithm to its corresponding 
animation images and actions. 

Algorithm component. For driving or 
activating an animation, the framework 
uses an event-driven approach advocated 
by the Balsa system. 2 Designers identify key 
positions in a program corresponding to 
operations that are important to the pro¬ 
gram’s semantics, such as Compare and 
Exchange in a sorting algorithm. Such 
positions, which I call algorithm opera¬ 
tions, are modeled as procedure calls with 
a number of integer, real, or string param¬ 
eters. As each operation is reached during 
program execution, its name and parame¬ 
ters are forwarded through the mapping 
component to the animation component. 

Animation component. The animation 
component contains the graphical objects 
that change location, size, and color 
throughout the frames of an animation and 
the operations that control the changes to 
simulate an action. This component’s for¬ 
mal model contains four abstract data types 
— the graphical images, the locations of 
images and other objects, the images’ tran¬ 
sitions, and the paths that modify those 
transitions. 

Whereas Mallgren was one of the first 
researchers to apply data types to computer 
graphics, creating a special graphic data 


type useful for specifying pictures, 8 my work 
pioneers the application of data types to 
algorithm animation. Since animation de¬ 
sign in this framework is based on defining 
paths and transitions, I call it the path- 
transition paradigm. A designer producing 
an animation in this paradigm creates, 
manipulates, and edits instances of the four 
abstract data types. The framework also 
includes a set of constituent operations for 
defining and modifying instances of the 
data types. Consequently, the framework 
strongly resembles an object-based sys¬ 
tem. Table 1 shows a complete list of the 
data-type operations. 

To understand how the data types work, 
suppose we have a rectangle and a line 
(instances of the image data type) in the 
animation viewing area, as in Figure 4, and 
we want to design an animation in which 
the rectangle moves along a straight path to 
the top of the line. Let’s assume that some 
form of image-creation operation put them 
in their current positions. Because we want 
the rectangle to move to the top of the line, 
we need to know the current positions of 
the center of the rectangle’s lower edge 
and the top endpoint of the line. These 
coordinate positions are examples of the 
location data type. We can then use the two 
locations as endpoints of a path consisting 
of a sequence of interpolated offsets between 
the endpoints. The path is an example of 
the path data type, and the motion along it 
is an example of the transition data type. 

Images. An image is a graphical object 
that undergoes changes in location, size, 
color, etc. throughout the frames of an 
animation. There are two types of images 


in the framework. Primary images include 
lines, rectangles, circles, and text. I provide 
a general model for a primary image so that 
the framework is not restricted to a certain 
set of picture objects. Composite images 
are collections of primary images with 
geometric relationships to one another, as 
defined by a list of primary images in a local 
coordinate system. They simplify anima¬ 
tion design by letting users repeatedly create 
instances of more complex pictures. 

One of the main operations on images is 
the Locate operation, which is a bounding- 
box-oriented way to access image parts 
and extremities. It receives an image and a 
parameter specifying either “center” or one 
of the eight compass directions, such as 
north, southeast, or west, and it returns a 
location corresponding to the designated 
part on the image’s current position. 

Locations. A location is a position iden¬ 
tified by an (x,y) coordinate pair in the an¬ 
imation coordinate system. The ability to 
save and reference particular locations is 
an important tool for animation design. 
Locations often denote a particular vari¬ 
able in a program, while the image at that 
location denotes the variable’s value. In 
this framework, animations are laid out in 
a real-valued, infinite coordinate system, 
so they can function regardless of the ani¬ 
mation window size. Primary operations 
on locations include Create, Equal, and 
Modify. 

Paths. A path designates the magnitude 
of change in image attributes from one 
frame to the next. Images can only be 
modified through paths; for example, im¬ 
ages are moved or colored along paths, and 
their visibility is changed along paths. A 
path is formally defined as a finite ordered 
sequence of real-valued (x,y) coordinate 
pairs, where each pair designates a relative 
offset from the previous position. The length 
of a path p, denoted \p\, is the number of 
coordinate pairs it includes. 

A typical path designates a two-dimen¬ 
sional route in an abstract real-coordinate 
system. However, a path is not restricted to 
modifying geometric ( x,y ) coordinate off¬ 
sets. The same path can modify color, size, 
and so on. A path also contains a time- 
interval component because each offset 
corresponds to a new animation frame. For 
example, moving an image along a path of 
length 20 creates a 20-frame animation. 
Designers can use changes in path offsets 
to control the smoothness of an animation. 

The use of paths to control two-dimen¬ 
sional animation is a natural and tested 
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notion. Baecker originated the idea of us¬ 
ing paths to control various aspects of an 
animation via his p-curve structure, 9 a 
continuous trail of symbols placed along a 
two-dimensional route at short, uniform 
intervals. 

Because paths play such an important 
part in animation design, the framework 
contains a large set of path inquiry and 
creation operations. Inquiry operations such 
as Length, DeltaX, and DeltaY return those 
respective values for a path. Three basic 
path types — straight, clockwise, and 
counterclockwise — are predefined to help 
designers create simple paths. The Null 
operation creates a path with a specific 
number of null (0.0,0.0) offsets. This oper¬ 
ation is useful for creating paths of a cer¬ 
tain length in which the individual offset 
values do not matter. The Color operation 
returns a one-offset path that changes an 
image to a desired color. Also, paths can be 
padded, truncated, rotated, interpolated, 
iterated, composed, and concatenated via 
operations. 

Other path operations — Example, Mo¬ 
tion, and Distance—receive two locations 
and create a path between them. The Ex¬ 
ample operation, for instance, receives three 
parameters — two locations that designate 
a motion’s starting and ending points and 
an example path that specifies the motion’s 
style. This operation produces a path sim¬ 
ilar to the example path (although that path 
is constrained to the starting and ending 
points). It is particularly useful when a 
path pattern is desired but the endpoints’ 
coordinates are not known until runtime. 

Transitions. A transition uses a path pa¬ 
rameter to modify an image’s position or 
appearance, giving an animation action. 
Like images, transitions have an extensible 
definition that does not restrict the frame¬ 
work to a predefined set of types. Simple 
transitions are defined by a transition type, 
the image being altered, and a path-argu¬ 
ment modifier. Typical transition types 
include move, resize, color, fill, raise, low¬ 
er, delay, and alter visibility. 

Different transition types use path argu¬ 
ments in different ways. In a move transi¬ 
tion, each path offset defines how an image 
should move before the next frame. Visi¬ 
bility transitions simply toggle an image’s 
visibility for each path offset. Fill transi¬ 
tions use the x component of a path offset 
by adding its value to an image’s fill value, 
which ranges from 0.0 (outline) to 1.0 
(solid colored fill). 

The Iteration, Concatenation, and Com¬ 
position operations create more complex 


Table 1. Data-type operations in the algorithm-animation framework. 


Image 

Location 

Path 


Transition 

Create 

Create 

Create 

Rotate 

Create 

Locate 

X 

Load 

Scale 

Concatenate 


Y 

Store 

Example 

Iterate 


Modify 

Length 

Motion 

Compose 


Equal 

Dx 

Distance 

Perform 



Dy 

Concatenate 




MakeType 

Iterate 




Null 

Compose 




Copy 

AddHead 




Color 

AddTail 




Extend 

DeleteHead 




Interpolate 

DeleteTail 



transitions. Composition is the most inter¬ 
esting, as it lets transitions execute concur¬ 
rently. When two transitions are composed, 
their respective actions in each frame oc¬ 
cur simultaneously. Therefore, composi¬ 
tion provides a natural way to perform an 
animation in which more than one object 
changes. For example, to animate two rect¬ 
angles exchanging positions, we create two 
move transitions, each corresponding to 
one of the rectangles’ moving to the oth¬ 
er’s position. Then we compose the two 
transitions into a single, new transition that 
denotes their concurrent movements. 

As a more sophisticated example, sup¬ 
pose we want to define a transition that 
moves an image i along a path p, of length 
20. We also want the image’s visibility to 
toggle during the middle 10 movements. 
Let’s define the following notation to rep¬ 
resent the transition operators: 

t l ■ t 2 = concatenate transitions t, and t 2 
(t, occurs first) 

r um = iterate the transition tnum times 
t, Q t 2 = compose transitions r, and t 2 

By creating the paths 

p 2 = Null(5) 
p 2 = Null(l) 

and the transitions 

/, = Create(delay, i, p 2 ) 
t 2 = Create(visible, i, p 3 ) 
f 3 = Create(move, i, p t ) 

the desired animation is simply the follow¬ 
ing formula: 



Figure 4. An animation in which the 
rectangle moves to the top of the line. 


(h-t^-OOh 

Once a transition has been defined, the 
Perform operation executes it. Intuitively, 
this operation works by modifying image 
attributes as specified by all the changes 
for a particular frame. Once all attribute 
modifications have been made, the anima¬ 
tion display is cleared and the images are 
redrawn in their new configuration. The 
animation frames are thus generated by 
repeatedly processing the lists of changes. 

Designers create animations by assem¬ 
bling collections of image, location, path, 
transition, and association operations that 
accomplish desired animation actions. 
(Association operations are explained be¬ 
low.) I call such collections animation 
scenes. For instance, in an animation of a 
sorting algorithm (as in Figure 1), the ex¬ 
change of the positions of elements being 
sorted might correspond to an animation 
scene. I use the word “might” because 
there is no correct decomposition of an 
animation into scenes; the process is sub¬ 
jective to the animation designer. 
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Algorithm operations 



Algorithm process Animation process 


Figure 5. Overview of the two-process communication in Tango. 



Figure 6. Associating a new algorithm operation with a line of source code. The 
operation name is Exchange, and it sends four parameters. 


As mentioned earlier, I have developed 
precise semantic specifications of all the 
data-type objects, operations, and models 
in the framework. Details of these specifi¬ 
cations can be found elsewhere. 10 ' 11 

Mapping component. The third com¬ 
ponent of the framework comprises the 
mappings from a program and its execu¬ 
tion to the animation. One part of this 
component involves a general storage and 
retrieval mechanism, called an association, 
which lets designers connect a data object 
(such as an image, location, or data value) 
with a set of parameters received from the 
program. Associations have unique names 
and can use zero or more parameters. 

More formally, an association is a way 
to store a data object such as a data-type 
instance or a data value. A typical imple¬ 
mentation uses hashing. The hash key for 
the data object is the association’s name 
and a list of parameters. Once designated, 
the number of parameters for each associ¬ 
ation is fixed. Typically, the parameters 
are the data values being mapped from the 
program. 

Consider again the animation in Figure 
1. An array of values in a sorting program 
typically has corresponding images, such 
as the row of rectangles, in the program’s 
animation view. The animation designer 
can store a reference to the rectangular 
image representing each array element under 
an association called ID with parameters 
for the array identifier value and the index 
position in the array. Subsequent anima¬ 
tion actions corresponding to such opera¬ 
tions as Compare and Exchange can then 
retrieve particular images as required. As¬ 
sociations between two animation objects 
are also allowed; in fact, they are quite 
common. For instance, an association called 
ImageAt is often used to store an image 
object by using a location object as a pa¬ 
rameter. 

Associations are defined and referenced 
in animation scenes. Most often, the asso¬ 
ciations between a program’s data and the 
corresponding images are set up in an ini¬ 
tialization scene that draws the beginning 
image configuration. Subsequent anima¬ 
tion scenes reference these associations 
and make modifications as necessary. 

Associations sometimes duplicate in¬ 
formation and data about the state of the 
program being animated. This duplication 
is common in existing systems, but it can 
be a disadvantage when it is extreme, that 
is, when the animation essentially main¬ 
tains a second copy of the program. The 
associations in my framework let design- 
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ers store whatever level of information 
they deem necessary. In practice, it is often 
wise to maintain critical portions of the 
program state in the animation component 
because animation timing and speed re¬ 
quirements far outweigh space concerns. 

The second major part of the mapping 
component is the mapping from algorithm 
operations to animation scenes. I use a 
finite-state automaton model that allows 
one-to-one, one-to-many, many-to-one, and 
many-to-many mappings. Designers spec¬ 
ify mappings independently of the creation 
of animation actions and program abstrac¬ 
tions. This independent, multiple-mapping 
scheme is more powerful and flexible than 
an internal scheme such as Balsa’s, which 
allows only one-to-one mappings between 
operations and scenes. Allowing one algo¬ 
rithm operation to activate a sequence of 
scenes helps designers access existing scene 
libraries. Delaying an animation scene un¬ 
til a sequence of algorithm operations oc¬ 
curs is useful for animations that need to 
update only after a predefined number of 
program operations. 

Tango system 
implementation 

Tango is an algorithm animation system 
based on the above framework and orga¬ 
nized as a set of cooperating components 
as opposed to one large self-contained sys¬ 
tem. The components include the program 
being animated, the code controlling the 
animation, and the Tango executable itself. 
This structure has the advantage that 
modifying one part does not require chang¬ 
ing or recompiling another. System com¬ 
ponents communicate with each other 
through interprocess communication 
mechanisms and simple function calls. 
Developers use two Unix processes to run 
a program and generate its accompanying 
animation under Tango. Figure 5 shows 
the configuration. 

In the animation process, the user starts 
Tango. The system reads a control file 
specifying parameters for the animation 
(such as algorithm operation and anima¬ 
tion scene names), dynamically loads the 
specified animation description files con¬ 
taining the designer-defined animation 
code, creates a window on the screen to 
display the animation, and waits for algo¬ 
rithm operations from the program being 
animated. 

In the algorithm process, the user runs 
the program being animated. The program 


must contain algorithm operations that will 
be distributed to the animation process as 
they are encountered. An interprocess mes¬ 
sage communication mechanism from the 
Field programming environment 12 controls 
the distribution of algorithm operations. 

Tango also provides simple input, a way 
to pass information from the animation 
process back to the algorithm process. The 
system includes procedures that let view¬ 
ers use the mouse to select arbitrary win¬ 
dow coordinates and image objects. The 
selected animation scene information can 
be formatted into strings that are passed 
back to algorithm operations. For example, 
in a shortest-path algorithm animation I 
designed, the viewer creates the graph to 
be examined by using the mouse to designate 
vertices and edges in the animation view. 
The viewer also graphically selects the 
start and end vertices used by the algorithm. 
Tango passes all this information to the 
program in the algorithm process, which 
then begins to find the shortest path. 

Tango is based on the three framework 
components discussed in the introduction. 
Therefore, to produce an animation with 
Tango, an animator must 

• annotate the program with the neces¬ 
sary algorithm operations, 

• design animation scenes to implement 
the animation actions, and 

• create a control file specifying the 
mapping from the algorithm opera¬ 
tions to the animation scenes. 

Annotating a program with operations. 

Tango gives designers two ways to anno¬ 
tate a program with algorithm operations. 
One method uses a text editor to add ex¬ 
plicit, message-sending procedure calls to 
the program. Each call contains the opera¬ 
tion name and the operation’s integer, real, 
or string parameters. 

The other method uses Field’s annota¬ 
tion editor to view the program source code 
and designate algorithm operations. The 
annotation editor is a typical window-based 
text editor augmented by a special region 
that can contain various types of annota¬ 
tions. To associate an operation with a line 
of code, the designer uses the mouse to 
select the Event button and then click in the 
annotation region next to the desired source 
line. (The operations used by Tango are 
uniquely identified by the Field annotation 
type Event.) This action opens a dialog box 
in which the designer enters the opera¬ 
tion’s name and parameters as shown in 
Figure 6. This tool does not embed addi¬ 
tional code in the original executable code 


MoveTo(locid, locnum, imid, imnum) 
int locid, locnum, imid, imnum; 

{ 

Location fromloc, toloc; 

Image image; 

Path pathl,path2; 

Transition mover; 

toloc = AssocRetrieve(“ID”, locid, 
locnum); 

image = AssocRetrieve(“ID”, imid, 
imnum); 

fromloc = ImageLoc(image, Center); 
pathl = PathMakeType(Clockwise); 
path2 = PathExample(fromloc, toloc, 
pathl); 

mover = TransCreate(Move, image, 
path2); 

TransPerform(mover); 

1 


Figure 7. Implementation of an anima¬ 
tion scene that retrieves an image and 
a location, then moves the image to the 
location. 


of the program being animated when stor¬ 
ing the algorithm operations across ses¬ 
sions. 

The program must be compiled once 
after the desired algorithm operations have 
been added. Using Field’s debugging tool, 
dbgview, designers can add and delete al¬ 
gorithm operations dynamically without 
recompiling, thereby encouraging experi¬ 
mentation with program abstractions. 

Designing animation scenes. Tango 
implements the framework’s four abstract 
data types as user-defined types in the C 
programming language. The data types’ 
operations are implemented as a package 
of routines available to animation design¬ 
ers. This package and the mapping-associ¬ 
ation calls provide a form of algorithm 
animation design language. Animation 
scenes are simply C functions with param¬ 
eters that receive data from the driving 
program. These data are the values sent as 
parameters to algorithm operations. 

Figure 7 shows an example animation 
scene that retrieves image and location 
objects (created and stored in a prior scene) 
and then moves the image in a semicircular 
path to be centered at the specified loca- 

In designing animations with Tango, I 
quickly discovered the need to repeatedly 
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0.0 0.0 1.0 1.0 

# corner window coordinates 

%% 


myscenes.o animlib.o 

# animation scene files 

%% 


Init %d %{ 

# algorithm operations 

Check %d %d 


Update %d 


Complete %d %s 


%% 


ANIMInit 

# animation scenes 

Display 


Update 


ANIMComplete 


Finish 


%% 


Init -> ANIMInit 

# operation to scene mappings 

Check Check Check -> Display 


Update -> Update 


Complete -> ANIMComplete Finish 



Figure 8. Example of a Tango control file. The mapping section illustrates some 
of the system’s capabilities. 


create logical structures of objects such as 
rows, columns, grids, graphs, and trees. To 
address this need, I implemented a package 
of routines called Twist (for “Tango’s 
wonderful image-synthesis toolkit”) that 
could create multiple sets of data-type 
objects in a single call. Twist is simply a 
macro package — a set of routines using 
calls to Tango — often used in initializa¬ 
tion animation scenes to set up an anima¬ 
tion’s background images. Twist routines 
can create rows, columns, and grids of 
locations and images, as well as graphs and 
binary trees. For example, I used the rou¬ 
tine TwistlmageArray to create the row of 
rectangles in the animation in Figure 1. 
The routine receives a list of numbers 
specifying the array elements’ values, along 
with parameters specifying the desired 
image type, location, size, spacing, align¬ 
ment, color, fill style, and so forth. The 
routine also takes association name and 
parameter arguments so that the individual 
images and locations created in the routine 
can be accessed in other designer-defined 
scenes. 

In addition to textual scene definition, I 
am working on a direct-manipulation 
graphical design tool for creating anima¬ 
tion scenes simply by demonstration. The 
tool, called Dance (for “demonstrational 
animation creation”), will let designers 
sketch out desired actions through menu 
choices, draw operations, and mouse se¬ 


lections. It will then automatically gener¬ 
ate the appropriate Tango design code. 

Mapping algorithm operations to an¬ 
imation scenes. To identify and link algo¬ 
rithm operations and animation scenes, 
Tango requires that designers define an 
animation control file that includes map¬ 
pings from operations to scenes. At start¬ 
up, invoking an animation name such as 
“Tango xxx” begins the Tango process that 
creates the animation window. Given this 
command, Tango searches for the control 
file xxx.anim. Figure 8 shows an example 
control file. 

The symbol %% separates sections in 
the control file. The first section designates 
the animation window’s upper-left and 
lower-right coordinates. The second sec¬ 
tion designates which compiled object files 
of designer-defined animation scenes should 
be dynamically loaded for the animation. 
The third section contains the names of 
algorithm operations in the program and 
the type specifications of their parameters. 
The symbols %d, %f, and %s denote inte¬ 
gers, doubles, and strings, respectively. 
Tango uses Field to register operation names 
and parameter patterns as well as Tango’s 
message handler routine. Whenever a des¬ 
ignated operation is encountered. Field 
passes the operation name and actual pa¬ 
rameter runtime values to Tango’s mes¬ 
sage handler. The fourth section lists the 


animation scenes available for a particular 
animation. Scenes are the designer-defined 
C functions, such as the one in Figure 7, 
residing in the files designated in the sec¬ 
ond section. 

The final section of the control file de¬ 
fines the mappings from algorithm opera¬ 
tions to animation scenes. Each line desig¬ 
nates a mapping. The format is 

algorithm operations -> animation scenes 

Any sequence of valid operations can 
occupy the left side of a mapping. Similar¬ 
ly, any sequence of animation scenes can 
be on the right side. When an appropriate 
uninterrupted sequence of operations oc¬ 
curs, the scenes execute in the order given 
in the mapping. Currently, multiple left¬ 
side matches are resolved in favor of the 
shortest operation pattern. 

The use of external mapping specifica¬ 
tions is particularly flexible because it lets 
designers change mappings simply by ed¬ 
iting the control file; no recompilation is 
necessary. For example, consider a sorting 
algorithm in which the designer has creat¬ 
ed two animation scenes for the Compare 
operation: highlighting the two compared 
images (comp 1) and moving the two imag¬ 
es to a common location for comparison 
(comp2). To alternate between actions in a 
particular animation run, the designer need 
only switch between the following two 
mapping definitions in the control file: 
“compare —> compl” and “compare —> 
comp2.” 

Running an algorithm animation. Once 
the operations, scenes, and mappings have 
been defined, the animation is ready to run. 
Recall that two processes are necessary to 
animate programs with Tango: the anima¬ 
tion process and the algorithm process. 

In the animation process, the viewer 
issues the command “Tango xxx.” Tango 
reads xxx.anim, loads the designated ob¬ 
ject files, and establishes the operation-to- 
scene mappings. It also registers the routine 
that Field should call when a pertinent 
algorithm operation is generated during 
program execution. Tango then produces a 
window to display the animation and waits 
for the algorithm to execute. 

In the algorithm process, the viewer runs 
the program being animated. If the algo¬ 
rithm operations were added as explicit 
procedure calls, simply running the pro¬ 
gram will suffice. If the operations were 
added with Field’s annotation editor, the 
program must be run under Field’s debug¬ 
ger. As execution reaches the explicit pro- 


34 


COMPUTER 











cedure calls or the lines of source code 
containing annotations, Field transmits the 
messages to its server. Each message’s 
algorithm-operation information is passed 
to Tango’s message-handler routine. Tan¬ 
go then receives the operations and per¬ 
forms the appropriate animation scenes. 

Tango animation windows contain icon¬ 
ic commands that let the user pan and zoom 
the view, a scroll bar that controls the 
relative speed of the animation, and a reset 
button that allows multiple program runs 
without removing the original display win¬ 
dow. I also recently added refresh and 
pause buttons. Tango’s graphics operations 
are implemented with packages from the 
Brown Workstation Environment, 13 an XI1 - 
based application-interface toolkit running 
on Sun and Digital Equipment Corporation 
workstations. No unusual graphics opera¬ 
tions are necessary, so implementations 
for other standard toolkits should not be 
difficult. 

This two-process model is expandable 
to a multiprocess model using Unix inter¬ 
process communication. The multiprocess 
model supports both single-program/mul¬ 
tiple-view and multiple-program/single- 
view models. In the latter case, incoming 
operations are simply queued by the ani¬ 
mation view and executed in the order 
received. An example using the first case is 
a graph algorithm animation that supports 
a traditional vertex-edge view as well as a 
view of its adjacency matrix. The second 
model could be useful for animations of 
parallel algorithms. 

Tango performs animations using one of 
two methods: bit block-level transfer (bit- 
bit) from an offscreen bitmap or double¬ 
buffering images in the color table. Tango 
also provides a mode in which all images 
are redrawn for each new frame, insuring 
view correctness, as well as a mode in 
which only modified images are redrawn. 
This second mode is often significantly 
faster and is quite useful when the anima¬ 
tion contains no image overlaps. 

An example 

The following example of animating the 
first-fit bin-packing algorithm will further 
illustrate how the path-transition paradigm 
simplifies algorithm animation. 

Conceptual design. The bin-packing 
program’s data structure consists of an 
ordered set of n bins. Each bin can hold a 
given weight. Let’s assume the value 0.0 
indicates the bin is empty, and 1.0 indi¬ 


cates it is full. The algorithm processes 
weights with a value between 0.0 and 1.0, 
and it tries to place them in the bins in order 
from 1 to n. A weight stays in a bin if it does 
not make the bin’s total capacity exceed 
1.0; otherwise, the algorithm tries to fit the 
weight in the next bin. 

To produce an animation of this pro¬ 
gram, we must first conceptually design 
the animation sequences. Let’s represent 
the set of bins as a large rectangle. Vertical 
levels on the rectangle define weight ca¬ 
pacities; the rectangle’s base means “emp¬ 
ty” and its top means “full.” Horizontal 
positions across the rectangle designate 
the different bins. Weights are represented 
as smaller rectangles, and their height cor¬ 
responds to their weight value in the same 
proportion as the bins’ do. 

In the animation, we’ 11 have a new weight 
appear to the left of the bins and move to 
the right to try to fit in a bin. If the weight 
is too large, it moves to the next bin. The 
movement should be gradual and smooth 
for the best visual presentation. Figure 9 is 
taken from a Tango animation of this pro¬ 
gram and shows a composite picture of a 
sequence of frames in which a weight fails 
to fit in the first bin. 


Identifying algorithm operations. Once 
the conceptual design is complete, we can 
implement the animation. We first anno¬ 
tate the bin-packing source with algorithm 
operations. This involves four main opera- 


(1) Init(bin ID, number of bins). The 
number of bins has been chosen. The cor¬ 
responding animation scenes should draw 
the bins and set up scalings and associa¬ 
tions for subsequent operations. 

(2) NewWeight(weight ID, weight 
number, weight value). A new weight has 
been entered. The corresponding anima¬ 
tion scenes should draw an appropriately 
scaled rectangle at the appearance loca- 

(3) Failure(weight ID, weight number, 
bin ID, bin number). The weight is too 
large for the bin. The corresponding ani¬ 
mation scenes should show the weight 
moving smoothly from its current position 
to the bin. The rectangle image should 
protrude from the top of the bin, indicating 
it is too large. 

(4) Success(weight ID, weight number, 
bin ID, bin number). The weight fits in the 
bin. The corresponding animation scenes 
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main() 

{ 

int n,binnum,i,wtnum; 
double wt,bin[100]; 

printf(“How many bins?\n”); 

scanf(“%d”,&n); /* n holds # of bins */ 

ALGO_OP(“Init”,bin,n); 

for (i=0; i<n; ++i) /* initializes bins to be empty */ 

bin[i] = 0.0; 

wtnum = 0; 

printf(“Enter the weights (0.0 to quit)\n”); 
for (;;) 

{ scanf(“%lf’,&wt); /* weights range 0.0 to 1.0 */ 

if ((wt == 0.0) II (wt > 1.0)) break; 

ALGO_OP(“NewWeight”,&wt,wtnum, wt); 
binnum = 0; 

while (bin[binnum] + wt > 1.0) /* try until weight fits */ 

{ ALGO_OP(“FaiIure”,&wt,wtnum,bin,binnum); 
binnum++; 

} 

ALGO_OP(“Success”,&wt,wtnum,bin,binnum); 

bin[binnum] += wt; 

wtnum++; 

} 

} 


Figure 10. Sample implementation of a first-fit bin-packing algorithm supple¬ 
mented by Tango’s algorithm operations. 


double width,bhei=0.5; /* individual bin values */ 

void 

Animlnit(id, bins) 
int id, bins; 

{ 

double x, y, bwid=0.65; 

Location loc; 

Path path; 

Transition show; 

/* create the bin holding area */ 

ImageCreate(Rectangle, 0.3, 0.4, 1, Black, bwid, bhei, 0.0); 

/* params are (type, locx, locy, vis, color, xsize, ysize, fill) */ 

width = bwid / bins; /* determine individual bin width */ 

/* create row of bin locations (where weights should go in) */ 
TwistLocArray(NULL, id, bins, 1, 0.3, 0.4+bhei, width); 

/* params are (AssocName, AssocID, num, horiz?, locx, locy, spacing) */ 

loc = LocCreate(0.05, 0.9); 

AssocCreate(“START_PT”, 0) /* save place for new elements to appear */ 

AssocStore(“START_PT”, loc); 

path = PathNull(l); /* must perform trans to generate a frame */ 

show = TransCreate(Delay, NULL, path); 

T ransPerform(sho w); 

AssocCreate(“TEXT”, 1); /* Assoc TEXT used by AnimNewWeight scene */ 

} 


should show the weight moving smoothly 
from its current position to the bin. The 
weight’s rectangle image should then be 
filled to indicate it is in place. 

Figure 10 shows the program’s source 
code supplemented by these four algorithm 
operations. None of the operations in this 
particular animation uses a return value. 

Designing the animation scenes. To carry 
out the animation, we need to design ani¬ 
mation scenes that will be activated when 
the algorithm operations are generated. 

The initialization scene, which I will 
call Animlnit, draws the container for the 
bins and stores a location where new weights 
will appear. The most important aspects of 
this scene, however, are partitioning the 
container into bins and implementing a 
strategy for determining where a weight 
should go, given a certain bin number. 
Placing the initial weight in a bin is easy; 
the weight’s rectangle image sits on the 
bin’s baseline. But once each bin contains 
a weight, the correct entry point for a new 
weight is the top of a previous weight, a 
position that might be anywhere in the 
bin’s valid storage area. The position is 
determined explicitly by the previous data 
inputs from the bin-packing program. 

We can solve this positioning problem 
by allocating a location object to each bin. 
Each location identifies the position that 
the bottom of a new weight image should 
occupy in the bin. It is stored under an 
association where the key is the general bin 
ID and the individual bin number. Initially, 
the locations are placed in a horizontal row 
across the base of the rectangle container. 
When a weight finds a valid bin, the bin’s 
location must be updated by acquiring the 
location of the top of the weight image. The 
next valid weight entering the bin simply 
should sit on top of the previous one. 

The NewWeight operation designates a 
new weight’s number and value. Its corre¬ 
sponding animation scene must create a 
new image to represent the weight. Two 
pieces of data are necessary to create the 
image: the location at which the image 
should appear and the image’s scaled 
height. Allocating the weight’s image ac¬ 
tually involves two image-creation calls, 
one for the rectangle container and one for 
the weight number inside the rectangle. 
Each image object is then stored for later 
retrieval. 

The Success and Failure algorithm oper¬ 
ations both begin by making the active 
weight move smoothly to a bin. We can 
define one animation scene, which I will 


Figure II. Implementation of the Animlnit animation scene. 
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call AnimMoveTo, to carry out this initial 
action. (Note that the Success operation 
requires further actions.) The AnimMove¬ 
To scene is straightforward: Using the al¬ 
gorithm’s weight and bin-number parame¬ 
ters, we acquire the designated weight image 
and the bin-placement location, respec¬ 
tively. By acquiring the lower-left location 
of the weight image, we have the endpoints 
of a path from the weight’s current position 
to the proper bin. The path will contain 
many offsets, providing multiple in-be¬ 
tween animation frames. We create the 
smooth animation by creating move transi¬ 
tions for the weight’s outline and text num¬ 
ber along this path, composing the transi¬ 
tions, and performing the result. The 
simplicity of this scene’s definition illus¬ 
trates the power of Tango. 

The final animation scene we must de¬ 
sign is the second part of the Success oper¬ 
ation. I’ll call this scene AnimlnPlace. To 
designate that the weight is in place, we fill 
the weight’s image with a solid color and 
draw a black outline around it. We must 
also reset the bin’s entry location as the top 
of the weight’s rectangle image. Figures 
11-14 document the Tango code for this 
animation; no other code is necessary. 

Nevertheless, further simplification of an¬ 
imation design is desirable. I am pursuing 
this goal by implementing the Dance tool 
and exploring higher-level animation 
primitives. Figure 12. Implementation of the AnimNewWeight animation scene. 

Controlling the algorithm animation. 

Once the operations have been identified 
and the scenes implemented, we must de¬ 
sign a control file to coordinate the anima¬ 
tion. Figure 15 shows the file that controls 
the bin-packing example. Recall that the 
first section of the file specifies the anima¬ 
tion’s upper-left and lower-right starting 
window coordinates; the second section 
contains the names of the compiled files 
that contain the animation scenes; the third 
and fourth sections identify the algorithm 
operations and animation scenes, respec¬ 
tively; and the final section designates the 
mappings between operations and scenes. 

In the bin-packing example, the initializa¬ 
tion and weight-appearance routines map 
in a one-to-one manner, whereas the An- 
imMoveTo scene serves both the Success 
and Failure operations. The Success oper¬ 
ation also requires the AnimlnPlace scene. 


A growing number of students at 
Brown University and the Geor¬ 
gia Institute of Technology have 
used Tango to animate programs from a Figure 13. Implementation of the AnimMoveTo animation scene. 


void 

AnimMoveTo(wid, wnum, bid, bnum) 
int wid, wnum, bid, bnum; 

{ 

Location fromloc, toloc; 

Image rect, text; 

Path path, exact; 

Transition movel, move2, compose; 


rect = AssocRetrieve(“ID”, wid, wnum); 
text = AssocRetrieve(“TEXT”, rect); 
fromloc = ImageLoc(rect, Southwest); 

/* weight image */ 

toloc = AssocRetrieve(“ID”, bid, bnum); /* get bin entry location that was */ 

path = PathMakeType(Clockwise); /* created originally i 
exact = PathExample(fromloc, toloc, path); 
movel = TransCreate(Move, rect, exact); 
move2 = TransCreate(Move, text, exact); 

n TwistLocArray */ 

compose = TransCompose(2, movel, move2); 
TransPerform(compose); 

} 

/* move both */ 


AnimNewWeight(wid, wnum, wval) 
int wid, wnum; 
double wval; /* 0.0 to 1.0 */ 

{ 

double ht; 
char str[5]; 

Location loc, ctr; 

Image rect, text; 

Path path; 

Transition show; 

ht = wval * bhei; /* scale the rectangle’s height *1 

loc = AssocRetrieve(“START_PT”); /* create rectangle at starting location */ 
rect = ImageCreate(Rectangle, LocX(loc), LocY(loc)-ht, 1, Red, width, ht, 0.0); 

ctr = ImageLoc(rect, Center); /* put weight number inside the rectangle */ 
sprintf(str, “%d”, wnum); 

text = ImageCreate(Text, LocX(ctr), LocY(ctr), 1, Black, NULL, str, 1); 

/* params are (type, locx, locy, vis, color, font, string, center) */ 

path = PathNull(l); /* generate a new frame */ 

show = TransCreate(Delay, NULL, path); 

TransPerform(sho w); 

AssocStore(“ID”, wid, wnum, rect); /* must remember the weight */ 
AssocStore(“TEXT”, rect, text); /* save associated text too */ 

} 
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void 

AnimInPlace(wid, wnum, bid, bnum) 
int wid, wnum, bid, bnum; 


{ 

double fval[l], xO, yO, xl, yl; 

Location nw, se; 

Image rect; 

Path onepath; 

Transition fill; 


rect = AssocRetrieve(“ID”, wid, wnum); 

nw = ImageLoc(rect, Northwest); /* put black outline around weight */ 

xO = LocX(nw); yO = LocY(nw); 
se = ImageLocfrect, SouthEast); 
xl = LocX(se); yl = LocY(se); 

ImageCreate(Rectangle, xO, yO, 1, Black, xl-xO, yl-yO, 0.0); 

fval[0) = 1.0; /* fill the rectangle in solid color */ 

onepath = PathCreate( 1, fval, fval); 
fill = TransCreate(Fill, rect, onepath); 

T ransPerform(ftll); 


} 


AssocStore(“ID”, bid, bnum, nw); /* reset the entry point for the bin to the top 
left comer of the weight that just went there */ 


Figure 14. Implementation of the AnimlnPlace animation scene. 


o:oo.o l.o l.o 

%% 

bpackscenes.o 

%% 

Init %d 

NewWeight %d 
Failure %d 

Success %d 

%% 

Animlnit 
AnimNewWeight 
AnimMoveTo 
AnimlnPlace 

%% 

Init -> ANIMInit 
NewWeight -> AnimNewWeight 
Failure -> AnimMoveTo 
Success -> AnimMoveTo 
AnimlnPlace 


Figure 15. The Tango control file to co¬ 
ordinate the bin-packing algorithm an¬ 
imation. 

wide variety of domains, such as sorting, 
searching, hashing, computational geome¬ 
try, string, graph, and tree manipulations. 
We have also designed animated simula¬ 


tions such as a producer-consumer ring 
buffer, the Towers of Hanoi problem, and 
the post office queuing problem. The sys¬ 
tem has been used as an instructional tool 
in computer science courses at Brown Uni¬ 
versity. 

In early use of the system, designers 
implementing fairly complex algorithms 
found it easier to implement the animation 
in Tango before completing the actual source 
program. That is, they used the algorithm 
animation as a “graphical debugger” dur¬ 
ing source program development. Although 
algorithm animations have been used pri¬ 
marily for instructional purposes, this ob¬ 
served behavior motivates me to simplify 
animation production further and explore 
the use of algorithm animation in debug¬ 
ging and program design. 

My methodology for creating two-di¬ 
mensional animation sequences need not 
be restricted to animating programs. Im¬ 
provements in workstation graphics capa¬ 
bilities increase the utility of animation for 
such purposes as computer-aided instruc¬ 
tion and user interfaces. The concepts in 
my work could apply to these domains. 

Tango’s supportfor complex, structured 
imagery should improve. The system pro¬ 
vides natural primitives for describing ac- 


%d 

%d %f 
%d %d %d 
%d %d %d 


tions, but laying out and maintaining com¬ 
plex structures such as dynamic trees is 
still fairly difficult. One possibility here is 
the inclusion of constraint specifications, 
such as those used by the Animus system, 
to maintain graphical relationships with 
dynamic structures. 

Other plans involve development of a 
more formal, higher-level algorithm ani¬ 
mation programming language as well as 
improvement and refinement of the Dance 
tool. I also plan to apply my animation 
techniques to such areas as the animation 
of object-oriented programs and sophisti¬ 
cated parallel programs. ■ 
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Distributed Computer 
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George A. Champine, Digital Equipment Corporation 
Daniel E. Geer, Jr., Massachusetts Institute of Technology 
William N. Ruh, IBM 


P roject Athena was established in 
1983 to improve the quality of edu¬ 
cation at Massachusetts Institute of 
Technology by providing campuswide, 
high-quality computing based on a large 
network of workstations. The major spon¬ 
sors of Athena in addition to MIT are 
Digital Equipment Corporation and IBM. 

Although the approximate outline of the 
system was understood early in the project, 
the design evolved considerably over the 
first few years as the requirements became 
clearer. Today, Athena has met its design 
goals and is a fully operational production 
system. It consists of 1,000 workstations, 
in 40 clusters of 10 to 120 workstations 
each, for use by students 24 hours a day. 
One of the clusters is an electronic class¬ 
room. In addition to the student clusters, 
there are nine instruction development 
clusters and two facilities equipped to 
project images from workstation display 
screens. Workstation clusters have been 
installed in five student housing facilities, 
some with workstations in bedrooms and 
others with workstations in common areas. 

Currently, the system provides 10 Net¬ 
work File System file servers, two Andrew 
File System file servers, 24 Remote Virtual 
Disk file servers, 79 Postscript printers, 
three each of name servers and post office 
servers, and two authentication servers. It 


Now providing 10,000 
students and faculty 
with a variety of 
network services, MIT’s 
educational 
workstation system is 
designed to grow to 10 
times its present size. 


supports the Digital VAXstation and the 
IBM RT/PC. In addition to the standard 
Athena monochrome workstations, there 
are 15 multimedia workstations that support 
full-motion color video. The system has 40 
gigabytes of disk storage in the worksta¬ 
tions and an additional 50 gigabytes of disk 
storage in network file servers. Each work¬ 
station has from 50 megabytes to 100 
megabytes of disk. 

The Athena system is one of the largest 
centrally managed educational worksta¬ 


tion networks. It presently serves about 
10,000 active user accounts, which gener¬ 
ate about 4,000 logins and 9,000 mail mes¬ 
sages per day. The average student uses the 
system eight hours per week. In aggregate, 
users generate 12,000 questions per se¬ 
mester for the on-line consulting system, 
and print 3 million pages per year. About 
90 percent of undergraduate students and 
50 percent of graduate students use the 
system. Usage is increasing about 15 per¬ 
cent per year, as more students use the 
system and use it for more hours per day. 

A major benefit of Athena is that students 
need learn only one system for educational 
computing. Athena presents a coherent 
model of computing in which all applica¬ 
tions can run on all supported worksta¬ 
tions, independent of architecture. Because 
of the strong level of coherence, the human 
interface to the system is independent of 
the type of workstation being used. Thus, 
only one training program and one set of 
documentation are needed. 

The initial equipment for Athena was a 
time-sharing environment installed in late 
1983, utilizing about 63 VAX 11/750 and 
associated ASCII terminals running Ber¬ 
keley Unix. About 160 PC ATs also were 
used. Although the PCs did not run Unix, 
they provided the Athena designers valu¬ 
able experience in deploying networked 
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workstations and in managing the distribu¬ 
tion of software to them. 

The first workstations were introduced 
in late 1984 for staff use. The first public 
cluster of workstations for student use 
opened in March 1985. Deployment has 
continued aggressively since then. As 
workstations became more plentiful, the 
time-sharing system was used less and less. 
It was phased out entirely in September 
1987 in favor of a uniform workstation 
environment, and the time-sharing mini¬ 
computers were converted to file servers. 

This article describes the design of 
Athena’s distributed workstation system. 
Because the Athena project is a large un¬ 
dertaking, we include here only the dis¬ 
tributed aspects of the system. Sources of 
additional information are listed in “Further 
reading” at the end of the article. 

Requirements 

The first work in the Athena project was 
to decide on the requirements of the system. 
Some of the requirements established are 
characteristic of campus computing in 
general; others are unique to MIT. The 
following requirements of a distributed 
system were identified as necessary for 
meeting the needs of instructional com¬ 
puting on campus: 

• Scalability. The system must scale to 
support 10,000 workstations or more. 

• Reliability. The system must be avail¬ 
able continuously 24 hours a day, even 
though equipment failures occur fre¬ 
quently in a system this size. 

• Public workstations. Any user must be 
able to use any workstation. 

• Security. System services must be se¬ 
cure even though workstations are not. 

• Heterogeneity. The system must sup¬ 
port a variety of hardware platforms. 

• Coherency. All system applications 
software must run on all workstations. 

• Affordability. The cost to own and op¬ 
erate must not exceed 10 percent of 
tuition on a sustaining basis. 

System support of public workstations 
is necessary because workstations are 
presently too expensive to be purchased by 
individuals. The plan is to allow (but not 
require) individuals to purchase worksta¬ 
tions when they become affordable. 

Concerned about the complexity that 
might result from the system’s size, the 
designers have followed a policy of 
eliminating needless complexity through¬ 
out the project. 
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The mainframe model 
would have serious 
drawbacks in the Athena 
environment. 


Definitions 

We define a user as a person who uses a 
subsystem (such as a workstation), program, 
or service. A client is a user or a program 
acting for a user. A server is a provider of 
services or resources. A service is a set of 
actions to be performed. 

An object is referenced by its name. The 
object is located by its address or (more 
generally) by its path. A binding of the name 
to the object occurs when the name is 
associated with the address. Often part of 
the address is contained in a context of the 
name. Some systems use an address for a 
name. Although this may simplify system 
development, it can cause problems in 
binding a name to a different object. Re¬ 
solving a name means identifying the ad¬ 
dress related to a name. 

Coherence refers to the ability of two 
distinct hardware architectures to compile 
and run the same software. Interoperabil¬ 
ity is the ability of two subsystems to co¬ 
operate in the execution of a single task. 
For example, two subsystems supporting 
the X Window System (described later in 
the article) can cooperate on a single task 
as client and server because they support 
the same network protocol. 

Security has two major aspects: authen¬ 
tication and authorization. Authentication 
is determining the identity of the user. 
Authorization is determining that the user 
has legitimate access to the requested re¬ 
sources. 

Fail-soft refers to the ability of a system 
to continue to operate in spite of the failure 
of a subsystem, possibly with degraded 
performance. 

Models of distributed 
systems 

Many different models of distributed 
systems have been proposed. One extreme 
model might be called the mainframe 
model. In this model each workstation or 


other node in the distributed system can 
exchange files with other nodes subject to 
security restrictions, but nodes cannot work 
together in any other manner. All resource 
allocation, security access, and functional 
access are handled on a per-node basis. 

If a user in a distributed system based on 
the mainframe model wants access to a 
printer on another node, the user must log 
in to that node, gain security authorization 
on that node, move the file to be printed to 
that node, and then command the print 
function. A major benefit of the mainframe 
model is that presently available time¬ 
sharing operating systems (such as Unix) 
support it and can be used to implement it 
with minimal development. 

Another extreme model could be called 
the unified model. In this model all nodes 
in the distributed system are considered 
part of one logically unified system. Re¬ 
source allocation, security, and access to 
function are handled at the system or net¬ 
work level, not at the node level. 

If a user in a distributed system based on 
the unified model wanted to do the same 
print function, the user would simply issue 
the print command, logical printer name (if 
not the default), and file name. By logging 
in on the local workstation, the user be¬ 
comes logged in to all services provided 
anywhere in the system, and all system 
resources are accessible transparently. 

Athena is a single unified model, similar 
to a single time-sharing system, although it 
consists of more than 1,000 individual 
computers. The major benefit of the uni¬ 
fied model is that it automates much of the 
user control that must be supplied manually 
in the mainframe model. Indeed, the unified 
model has most of the characteristics of the 
single-mainframe model. 

Although the mainframe model would 
have been easier to implement than the 
unified model, it would have serious draw¬ 
backs in the Athena distributed-system 
environment. The mainframe model main¬ 
tains system integrity by preventing users 
from obtaining access to the kernel of the 
operating system. In the Athena environ¬ 
ment users can get access to the worksta¬ 
tion kernel either by obtaining the super- 
user password or by booting their own 
operating system. Thus, workstation integ¬ 
rity cannot be assured. Since users can 
corrupt the kernel of the operating system, 
they can masquerade as others or as a 
system service. The user can also “infect” 
the workstation with a Trojan horse, a 
virus, a worm, or other undesirable code. 
Of course, the user can monitor all Ether¬ 
net messages on the local net. 
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The mainframe model also assumes that 
users are attached to a particular machine. 
User files exist on that machine, and mail is 
sent to the user on that machine. Because 
one of the Athena objectives was to let any 
student use any workstation, this restriction 
was undesirable. Instead, the system should 
provide mail and file access as network 
services, accessible from any workstation, 
independent of location. 

Access to these network services (de¬ 
scribed later) has security implications. If 
user files or system software were stored 
on a public workstation, a user could damage 
(or delete) files. A user could corrupt the 
operating system, perhaps by inserting a 
Trojan horse that would capture passwords 
of subsequent users. Since any user can use 
any workstation, sending mail to a ma¬ 
chine is not suitable for the Athena envi¬ 
ronment. A preferable alternative is to send 
mail to “username” through a network 
service, and to allow mail to be read, written, 
and filed from any workstation. 

The mainframe model also had undesir¬ 
able support implications. The classical 
support model for mainframes is a system 
manager per system. At a scale of the order 
of 10,000 systems, this was clearly not 
appropriate. The ultimate objective for 
Athena is to have a system manager per 
1,000 workstations, requiring a three-or- 
der-of-magnitude improvement over con¬ 
ventional approaches. (Presently, five op¬ 
erations programmers support 1,000 
workstations.) 

Other distributed 
operating systems 

Several other distributed operating sys¬ 
tem projects have requirements similar in 
some respects to Athena’s. Two of them, 
Amoeba and Grapevine, are designed for 
larger environments than a single campus, 
but they have addressed many of the same 
issues as Athena. 

Amoeba 1 is designed to run in both a 
local and extended network environment. 
A typical local environment consists of 
perhaps 16 processors connected to a pool 
of several tens of workstations. Beyond 
that, multiple Amoeba sites can be inter¬ 
connected through a wide area network to 
form a single system. Amoeba research 
focuses on the use and management of the 
processor set in addition to communications 
and protection. An extended system inter¬ 
connects local Amoeba systems in a wide 
area network through several countries in 
western Europe. 
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The Athena and Andrew 
projects had similar 
objectives but approached 
them with different 
priorities. 


Andrew 2 is a system for support of in¬ 
structional and research computing at 
Carnegie Mellon University, with objectives 
very similar to Athena’s. Both systems 
support on the order of 1,000 midrange 
workstations in a Unix and Ethernet envi¬ 
ronment, with plans to scale to 10,000 
workstations. Both assume that the user 
has complete control over workstation 
functions, with a central mechanism con¬ 
trolling and supporting network services. 

A distributed file system called the An¬ 
drew File System (AFS), developed as part 
of Andrew, is now being used as the basis 
of a nationwide file system experiment. 
The AFS file space is separated into two 
parts: local and shared space. The local 
space is accessible to the user (generally on 
a local disk) but not publicly shared. The 
shared space can exist anywhere in the 
network and is publicly accessible. 

In contrast to the systems just described. 
Dash 3 is intended for very large hardware 
and systems of the future. It is designed for 
far faster and cheaper processors and net¬ 
works, implemented in numbers of thou¬ 
sands to millions, with worldwide dimen¬ 
sions. 

Eden 4 is an object-oriented operating 
system based on a single remote procedure 
call mechanism. It has a single, uniform, 
systemwide name space spanning multiple 
machines. An object is a set of processes 
that is referenced by capabilities and can 
migrate freely among systems. All objects 
have a data part, which includes short- and 
long-term data. Objects can checkpoint 
autonomously. According to the definition 
given earlier, Eden is a unified distributed 
system. 

Grapevine 5 is an older system, designed 
for much larger geographic distribution. It 
supports message delivery, resource loca¬ 
tion (naming), authentication, and access 
control services. Grapevine’s primary use 
is delivering mail. It has rapidly come to be 
used throughout the Xerox network, with 


nodes located in clusters around the world. 
Resources are accessed within the local 
cluster, but access is allowed to any other 
Grapevine system in the Xerox network. 
Grapevine consists of about 1,500 users 
and 17 servers in 50 local area networks. 

The objective of HCS (Heterogeneous 
Computer Systems) 6 is to integrate differ¬ 
ent hardware/software combinations into a 
single system. Based on heterogeneous 
communications protocols including TCP/ 
IP (transmission control protocol/Internet 
protocol), it uses a single global name 
space for the entire heterogeneous envi¬ 
ronment along with remote procedure calls. 
The network services supported are remote 
computation, mailing, and filing. 

Locus 7 is a distributed operating system 
that supports transparent access to data 
through a networkwide file system. It 
permits automatic replication of storage 
and transparent distributed process execu¬ 
tion. Locus also provides automatic repli¬ 
cation of resources to meet reliability re¬ 
quirements and can degrade gracefully with 
network and node failures. Locus is anoth¬ 
er example of a unified distributed system. 

Mach, 8 supporting both tightly coupled 
and loosely coupled general-purpose 
multiprocessors, also supports transparent 
remote file access between autonomous 
systems. It has large, sparse, virtual address 
spaces, copy-on-write virtual copy opera¬ 
tions, and memory-mapped files. Multiple 
threads of control are provided within a 
single address space. Large amounts of 
information can be transferred by the inter¬ 
process communications facility by means 
of copy-on-write techniques. Mach has a 
binary applications program interface 
compatible with Berkeley Unix 4.3. 

Sprite 9 is an operating system that sup¬ 
ports multiprocessing and distributed files. 
Its user-level facilities are identical to BSD 
Unix. All files and I/O devices are uniformly 
accessible to all systems, and they appear 
as a single shared hierarchy. There are no 
private partitions to manage, and devices 
and files can be accessed remotely. Com¬ 
plete Unix file semantics are provided, 
including locking and consistent access. 

V 10 is a testbed for distributed-system 
research. Its four logical parts are a dis¬ 
tributed Unix kernel, service modules, 
runtime support libraries, and added user- 
level commands. V manages a cluster of 
workstations and servers, providing the 
resources and information-sharing facilities 
of a conventional single machine. 

At the beginning of the Athena project, 
these and other distributed operating sys¬ 
tems were reviewed. None were found to 
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be suitable for Athena, often because they 
were in the early stages of research. 

System comparisons. Athena differs 
from the distributed systems just described 
in various ways. The following are some of 
the more important differences and simi¬ 
larities. 

Amoeba supports processor server back 
ends supporting workstation front ends over 
a network using a capabilities-based op¬ 
erating system. The operating system 
supports distributed processing by network 
processors assigned to tasks dynamically 
as the processing load requires. In contrast, 
Athena performs all processing on the lo¬ 
cal workstation as a default. Remote exe¬ 
cution can be initiated manually through 
the X Window System. 

The Athena and Andrew projects are 
similar in scope and objectives, but they 
approached the problem with different 
priorities. The Andrew designers felt that 
the issue of a distributed file system was so 
important that they needed to develop their 
own (AFS). They also developed a number 
of end-user application packages, such as 
compound document editors. Athena’s 
developers also thought that the distribut¬ 
ed-file problem was very important and, 
therefore, that industry would solve the 
problem—thus the use of Sun Microsys¬ 
tems’ Network File System. Project Athena 
concentrated on distributed services and 
did little with end-user services. The An¬ 
drew and Athena implementations com¬ 
plement each other quite well: Andrew 
uses the Athena windowing system (X) 
and authentication service (Kerberos), while 
Athena uses the Andrew compound docu¬ 
ment editor (EZ) and instructional authoring 
environment (cT). 

Eden is object oriented and allows pro¬ 
cesses to migrate freely among processors; 
Athena uses conventional subroutines and 
does not support process migration. 

Athena and Grapevine have relatively 
similar architectures. Both build on exist¬ 
ing operating systems, and both provide 
distributed services of mail, naming, and 
authentication on dedicated servers. One 
difference is that Grapevine provides access 
control, while Athena uses Unix access 
control. Athena supports the additional 
distributed services of file access, notifi¬ 
cation, printing, and service management. 

Like HCS, Athena supports a systemwide 
name space and provides distributed ser¬ 
vices. In contrast, Athena uses a single 
operating system programming and user 
interface. 

The Athena designers studied the Locus 



Athena’s designers 
studied the Locus 
architecture and used a 
number of its design 
concepts. 


architecture carefully early in the project. 
They used a number of its design concepts, 
and the fact that it operated on 17 main¬ 
frames interconnected by a local area net¬ 
work established confidence that the ap¬ 
proach was viable. In several areas Athena 
and Locus are very similar: Locus provides 
a high degree of network transparency. 
Files and programs can be moved dynam¬ 
ically with no effect on correct operation or 
naming. Local and remote resources are 
accessed uniformly. Locus also provides 
reliable operation. Reliable facilities include 
replicated file storage and automatic re¬ 
covery from various subsystem and network 
failures. A major difference between the 
two systems is that the Locus distributed 
file system puts all files in a single tree, 
while Athena has about 10,000 file roots, 
for flexibility and reliability. 

Whereas Mach is the kernel of a dis¬ 
tributed operating system on which a variety 
of programming interfaces can be built, 
Athena’s designers took the Berkeley 
programming and user interface as a stan¬ 
dard and developed a relatively clean layer 
of distributed services on it. 

The V system provides a software 
backplane that supports network-trans- 
parent address spaces, lightweight pro¬ 
cesses, and interprocess communication. 
Athena supports none of these, using 
standard Unix instead. Both systems sup¬ 
port distributed file servers and print servers. 

Issues in distributed 
systems 

Several issues arise immediately in the 
design of a distributed system. Among the 
most important are naming, scalability, 
security, and compatibility. 

Naming. A name service converts a 
logical name into a physical address by an 
algorithm, a table lookup, or a combination 


of the two. The purpose of a name service 
is to decouple the logical support of a 
function (such as printing) from the phys¬ 
ical implementation of that function. This 
makes changing the configuration of a 
system far easier. It is only necessary to 
change the logical-to-physical mapping, 
not all the code that references the func- 

System objects that can be named include 
hosts, printers, services, files, and users. 

Factors affecting the design of name 
servers include the number of object types, 
number of objects, frequency of queries, 
and update frequency. 

The simplest implementation of a name 
server is by means of a centralized service. 
If that is inappropriate for reasons of net¬ 
work bandwidth, distance, reliability, or 
load, the service can be distributed. If the 
implementation is by means of a database, 
the usual methods of data distribution can 
be used, including replication and parti¬ 
tioning. 

A replicated database is created in mul¬ 
tiple copies. Replication has the advantage 
of providing good performance and reli¬ 
ability, but update is difficult because of 
synchronization requirements. Replication 
also uses considerable storage. 

In partitioning, the database is split into 
multiple, disjoint databases. Some means 
must be provided to identify the correct 
partition, the one holding the data of interest. 
This can be done through a directory or a 
broadcast search. The advantage of a par¬ 
titioned database is that only one copy of 
the data exists, thus saving storage and 
simplifying update. One drawback is that 
the correct partition must be found for the 
access, and in some cases multiple partitions 
must be accessed to resolve the name. 
Another drawback is that a partitioned 
database is less reliable than a replicated 
database. 

Most of the systems mentioned here use 
a combination of replication and partitioning 
to achieve a balance between performance 
and storage requirements. Most name 
servers also use caching of frequently used 
names. 

Scalability. Design approaches that work 
well in a distributed system with a few 
nodes may not be usable in one with many 
nodes. For example, broadcast protocols 
work well for small numbers of nodes but 
do not scale well to large numbers. More 
generally, any design approach in which a 
scarce resource such as storage or manpower 
scales linearly with the number of nodes is 
likely to be too costly to implement. Thus, 
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techniques such as putting complete system 
configuration lists on every workstation 
(storage intensive) or making each work¬ 
station’s software configuration different 
(labor intensive) are not usable for even 
moderately large configurations (on the 
order of 100 workstations). 

Security. Two issues that must be con¬ 
sidered in security design for distributed 
systems are authentication and authoriza¬ 
tion. In a system of more than a few dozen 
workstations, the root password cannot be 
different on each workstation because the 
support task quickly becomes unmanage¬ 
able. Therefore, Athena has made all root 
passwords the same and known to all users. 

For user passwords, Unix systems store 
encrypted passwords for all users on each 
workstation. Maintaining user passwords 
for 100 or more workstations is very dif¬ 
ficult, and providing complete password 
and group files for each machine in a large 
network is highly impractical. This (repli¬ 
cated database) approach to authentication 
and authorization does not scale well and 
suffers from the usual problems of replicated 
databases. A natural alternative is to pro¬ 
vide a centralized password-checking ser¬ 
vice. To access remote services, passwords 
must be sent over the net. This method 
makes the system vulnerable to eaves¬ 
droppers, who can steal passwords. It also 
makes the system vulnerable to availablity 
failures. 

A solution to the problems associated 
with sending passwords across the net is to 
encrypt the passwords. Two encryption- 
based authentication approaches have been 
developed: public-key cryptography and 
key distribution servers. 

With public-key cryptography, encryp¬ 
tion keys come in pairs. Each key in the 
pair is used to decrypt messages encrypted 
in the other key. Therefore, one key of the 
pair can be given to the servers and the 
other (secret) key can be given to the user, 
who uses the secret key to become au¬ 
thenticated. 

A key distribution server assigns secure 
keys to be used between a user and a server. 
This approach scales well but requires a 
third party. The method generally used 
employs private keys and a trusted third 
party. 

Authorization can be handled in many 
ways. One way is to delegate the function 
to the servers and implement it by access 
control lists showing membership in 
groups. 5 Another way is to use capabilities 
implemented as a bit pattern passed to the 
server, showing that the user is authorized 
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to perform a particular operation." Capa¬ 
bilities are usually encrypted to prevent 
forgery. 

Compatibility. Various levels of system 
compatibility are possible, including the 
binary, execution, and protocol levels. 

In binary compatibility all processors 
execute the same binary instruction reper¬ 
toire and are compatible at the binary level, 
with differences only in performance and 
input/output. The Emerald distributed op¬ 
erating system 12 and VAX systems exhibit 
this level of compatibility. Although it 
greatly simplifies system development, 
binary compatibility severely restricts the 
system source and architecture and is not 
often used in large systems for this reason. 

It is more common to provide system 
compatibility at the next level up: the ex¬ 
ecution abstraction (called coherence in 
Athena). A common execution-level ab¬ 
straction exists if the same source code can 
be compiled and executed properly on the 
two systems. Andrew and Athena both 
support the Unix execution abstraction for 
the hardware platforms (VAXstation and 
RT for Athena). 

The least restrictive form of compatibility 
achieves interoperability by requiring all 
system components to support a common 
set of protocols. The X Window System in 
Athena is an example. Protocol-level 
compatibility allows a distributed system 
to be based on common protocols for es¬ 
sential system services such as file access, 
naming, and authentication. Because Athena 
supports this level of abstraction, the exe¬ 
cution abstraction could be given up and 
diverse operating systems would still be 
interoperable. 

Athena does not address the issue of 
application data coherence except through 
the X Window System, which enables each 
type of workstation to access its own type 
of data representation (for example, byte 
order) separately. 


Athena distributed- 
system model 

The distributed-system model for Athe¬ 
na has three major components: 

• workstations, 

• network, and 

• servers. 

The approach taken by the Athena de¬ 
velopers was to implement a set of network 
services to replace equivalent time-sharing 
services, in essence converting the time¬ 
sharing Unix model into a distributed op¬ 
erating system. 

The network is invisible to the user. All 
services appear to be local and are available 
to the user with only a single submission of 
a password at login time. The actual delivery 
of the services is physically distributed 
over the system and communicated to the 
user transparently over the network. 

In concept, any operating system can be 
used on components (workstations or 
servers) in Athena. To achieve interoper¬ 
ability with the other system components 
(and to gain access to the distributed ser¬ 
vices), the components need only support 
the Athena protocols for authentication 
service, name services, file access, and 
print service. 

To minimize development cost, the 
protocols have been implemented only in 
Berkeley Unix on all hardware platforms. 
A side benefit of supporting only Berkeley 
Unix is the minimization of training and 
support cost. The computational model seen 
by the users, therefore, is Berkeley Unix. 

Scalability. The design approaches used 
in Athena have improved its scalability by 
minimizing demands on scarce resources 
in three areas: network bandwidth, mass 
storage, and labor. 

The campus network was designed with 
a backbone using optical fiber and a token 
ring protocol running at 10 megabits per 
second. Network routers are attached to 
the backbone, with each router supporting 
one Ethernet configured as an Internet 
Protocol subnet. Because of the routers, 
traffic local to a subnet does not load the 
backbone. This approach gives a good 
measure of growth capability because as 
more workstations are added, more Ether¬ 
net subnets can be added to the backbone. 

Athena workstations are dataless nodes; 
that is, all workstations have local hard 
disks, which reduce paging traffic on the 
net. System software file service is repli¬ 
cated on all subnets, so communications 
traffic for the loading of system software 
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remains local to a subnet. 

To minimize mass storage, files that 
would normally be replicated on a per- 
workstation basis are centralized. These 
include password files and most configu¬ 
ration files. 

To minimize labor requirements, all 
workstations are anonymous and inter¬ 
changeable. They all have the same root 
password and the same software configu¬ 
ration. The only unique items are the work¬ 
station name and net address. The initial 
loading of software is done over the net. 

Reliability. To improve reliability, no 
systems other than network routers are 
attached to the backbone. This limits the 
number and types of problems that can 
bring the entire net down. All other systems 
are attached to the Ethernet subnets. As a 
general rule, a hardware failure may prevent 
the updating of master files for, say, adding 
new user accounts or changing the hardware 
configuration. However, system operation 
can still continue. Subsystems whose fail¬ 
ure would stop system operation, such as 
authentication service, name service, or 
access to system software, are replicated 
with automatic cutover. 

Public workstations. Clusters of 
workstations are provided at about 40 sites 
around campus; students do not have to 
walk more than about 10 minutes from any 
location to get to a workstation. In addition 
to the clusters for student use, several 
clusters are dedicated to the development 
of departmental instructional software. Any 
user can log in to any workstation and gain 
immediate access to private files and en¬ 
vironments. 

Because public workstations have no 
retained state between sessions, the oper¬ 
ations staff can reload the system at any 
time with no adverse consequences. By 
default the workstations refuse remote 
services such as login, to eliminate the 
impact of response time on the workstation 
user by others who might log in. Private 
workstations, generally used by faculty 
and staff, retain state between sessions. 

Security. The Athena designers assumed 
that workstation security cannot be main¬ 
tained. To obtain system security with in¬ 
secure workstations after login, they de¬ 
veloped an authentication service called 
Kerberos. 

The Kerberos server is a trusted-third- 
party, private-key, network authentication 
system that validates the identity of indi¬ 
viduals to network servers. It is based on 
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the model developed by Needham and 
Schroeder. 13 Time stamps have been added 
to that model to assist in the detection and 
prevention of replay. Kerberos operates 
without imposing any additional burden 
on the user as a part of the normal login 
process. 

Kerberos establishes authentication by 
securely making and distributing a session 
key for each server-client instance. The 
particular server then has the responsibil¬ 
ity to use the key in a manner consistent 
with its own authentication policy. The 
server may elect to (1) not use authentica¬ 
tion, (2) use authentication on the first 
request only, (3) use authentication on all 
transactions, or (4) authenticate and encrypt 
all transmissions. 

Heterogeneity. Since DEC and IBM, 
the two major sponsors of the Athena 
project, have incompatible workstation 
products, the system must support at least 
two incompatible workstation platforms. 
In addition, multiple generations of hard¬ 
ware from each vendor are not always 
compatible. The following minimum 
workstation requirements were imposed to 
bound heterogeneity and thereby bound 
the range of hardware for which instructional 
courseware must be developed: 

• Ethernet interface, 

• one million instructions per second 
processing speed, 

• one million pixel display (mono¬ 
chrome), 

• local hard disk of at least 40 mega¬ 
bytes, 

• four megabytes of main memory, and 

• pointer device (mouse). 

At this time Athena does not support 
personal computers and other 300,000- 
pixel devices. However, some level of sup¬ 
port for such devices is planned for the 
future, as described in the section on future 
plans. 


Interoperability and coherency. Athena 
supports both interoperability and coher¬ 
ency. As with the X Window System, the 
subsystems in Athena interoperate by us¬ 
ing a number of common network proto¬ 
cols. Unix and C provide a high level of 
coherence so that the same application 
source code, and most of the system source 
code, can be compiled and executed on all 
workstations regardless of architecture. 

Coherence in Athena includes standard¬ 
ization of three lower-level interfaces: 

• network service—the system interface 
between the applications and the op¬ 
erating system; 

• the applications programming inter¬ 
face—the interface between applica¬ 
tions and the system; 

• the user interface—the interface pre¬ 
sented by applications to users. 

To obtain system coherence, the same 
operating system and the same communi¬ 
cations protocols were used on both hard¬ 
ware platforms. Berkeley Unix was selected 
for its functional power and multitasking 
capability. It provides the same virtual 
machine interface to applications on all 
workstations. From 85 to 90 percent of the 
source code for the operating system is 
common to the two workstation types. 
Essentially all the source code is common 
for applications. Separate binaries (com¬ 
piled from the same sources) are supported 
for the two workstation types. For com¬ 
munications coherence, TCP/IP was se¬ 
lected to implement the same virtual net¬ 
work interface to all applications. 

Applications coherence is a much more 
difficult problem. It has been handled in 
part by supporting a small number of lan¬ 
guages on Athena. Presently supported 
languages are C, Lisp, and Fortran. 

Another part of the problem has been 
solved by a standard windowing system, 
the X Window System, developed by the 
MIT Laboratory for Computer Science and 
by Project Athena. X provides a network- 
transparent, device-independent, vendor- 
neutral windowing environment. 

The user interfaces for the two types of 
workstations are as identical as the key¬ 
boards and mouses will allow. X was de¬ 
veloped to provide applications coherence 
to the human interface. However, X solved 
only part of this difficult problem. Recently 
the Motif human interface development 
environment from Open Software Foun¬ 
dation has been installed to provide a more 
powerful level of abstraction in obtaining 
user interface coherence. 

In a similar manner, standard applica- 
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Figure 1. Athena system model. 


tions including a 2D drawing package 
(GKS), a text editor (Gnu EMACS), a 
spreadsheet, a laboratory data management 
system, and a document formatter have 
been adopted. 

Since the two different workstation ar¬ 
chitectures support two different floating¬ 
point and byte orders, the system must 
handle these differences in a method 
transparent to users. Each workstation 
knows its own type (VAX or IBM RT). 
Separate sets of binaries are stored for each 


system type. Text file formats are the same 
for both hardware platforms. When binary 
data are accessed, each workstation type 
accesses its own type based on data from 
the name server. 

Affordability. To achieve affordabili¬ 
ty, the designers decided to use centralized 
management and support of the system 
even though the hardware was distributed. 
Experience with Athena has indicated that 
centralized management and support pro¬ 


vide significant benefits in reduced sup¬ 
port cost and improved quality of services 
compared to distributed management and 
support. (It is true, of course, that distribut¬ 
ed management can solve political and 
organizational problems that the centralized 
approach cannot solve as easily). 

Athena system design 

The Athena system design views the 
entire hardware complex of (up to 10,000) 
workstations, file servers, communications 
servers, and printers as a single, unified 
distributed system (as described earlier). 
The system is diagrammed in Figure 1. It is 
network oriented; workstations attached to 
the network are identical in software 
configuration. They communicate with a 
variety of network servers, which provide 
services to users. Because all services pro¬ 
vided are network services, they are avail¬ 
able to all users without regard to location. 
They include 

• name service, 

• file service, 

• printing, 

• real-time notification, 

• service management, 

• authentication, and 

• installation and update. 

Files that would normally be provided at 
every workstation are centralized, with a 
small number of copies to provide fail-soft 
capability and improved performance. 

Service management. The configura¬ 
tion management of large numbers of 
workstations and servers is very labor in¬ 
tensive and cannot be done effectively by 
manual means. Therefore, Project Athena 
has developed a service management sys¬ 
tem called Moira to automate much of the 
routine management task. Moira includes 
a central database of system control and 
configuration information, tools for ma¬ 
nipulating that information, and tools for 
updating the services to conform to the 
database. Examples of types of informa¬ 
tion stored in Moira include disk quotas, all 
hardware configuration files, allocation of 
individuals to post offices, and access con¬ 
trol lists. 

The use of a centralized database has 
proved both effective and economical be¬ 
cause each piece of data is stored only 
once, is easily updated, and is subject to 
fine-grained access control. 
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Name service. In time-sharing systems 
names are resolved (typically) into addresses 
by means of configuration files. These files, 
which reside in each node, tend to be rel¬ 
atively static. This static approach is not 
appropriate for meeting system needs for 
dynamic reconfiguration in workstation 
networks. Also, it wastes storage if repli¬ 
cated on all workstations. 

The purpose of the Athena name server, 
called Hesiod, is to allow centralized, dy¬ 
namic linkage between names and objects. 
For example. Postscript printing for the 
third floor of building E40 might initially 
be provided by a printer named Nil at 
address “ps.mit.edu.” If, at some later 
time, this service were moved to a different 
printer at address “lqp.mit.edu,” it would 
not be feasible to update a configuration 
file on each of 10,000 workstations to re¬ 
flect the change. Instead, the name server 
provides a single, centralized location for 
the configuration file for all workstations, 
thus providing very significant savings in 
storage and making changes in system 
configuration manageable with minimal 
labor. 

Hesiod includes the Berkeley bind name 
server with some extensions. Hesiod pro¬ 
vides information on users, location of 
user private files, mail delivery addresses, 
and locations of network services such as 
authentication and printing. 

Hesiod is updated by the central system 
database (maintained by the Moira service 
management system) every few hours and 
in effect represents a fast front end to the 
Moira database. 

Authentication service. System soft¬ 
ware (except for the kernel) is not kept on 
the workstations; they function as dataless 
nodes. When a user logs in, new system 
software is down-loaded from a secure 
network file server, thus assuring a validated 
initial operating system. 

When the user logs out, a program called 
toehold deactivates the workstation. All 
attached file systems are detached. All 
temporary storage areas are cleaned out 
and the window system is terminated. No 
network connections (for example, to ex¬ 
ternal file servers) are retained. Several 
other housekeeping activities are performed, 
such as the destruction of any tokens of 
authenticity created for the previous user. 
Finally, the next login is solicited by a 
“Press any key” prompt. If a new system 
library is loaded onto a server while the 
workstation is deactivated, it will be used 
at the next login; this deactivation-activa¬ 
tion cycle provides an en masse software 


update of the nonresident portion of the 
system. 

When the key depression is received, 
toehold executes a shell script that attaches 
the system libraries from RVD (described 
in the next section) and starts the X Win¬ 
dow System. A login window then is acti¬ 
vated for the user and login is solicited. 

Login proceeds with the user submitting 
username and password. The user is au¬ 
thenticated transparently by the Kerberos 
authentication server, which obtains infor¬ 
mation about the user from the Hesiod 
name server. The user home directory is 
then attached from the appropriate file 
server. The Zephyr real-time notification 
service (described later) is activated and a 
Zephyr windowgram client is started. Lo¬ 
gin continues with the usual execution of 
the login files. 

Subsequently, Kerberos authenticates the 
identity of the user to the desired service in 
a fully transparent manner through the 
use of encrypted “electronic credentials.” 
The general information flow in Kerberos 
is shown in Figure 2. Kerberos only estab¬ 
lishes identity (authentication) and does 
not become involved in the decision of 
whether an individual is allowed to use 
a specific service (authorization). The 
normal Unix mechanisms are used for 
authorization. 

Two types of credentials are generated 
by Kerberos: tickets and authenticators. A 


ticket is used to securely transmit the iden¬ 
tity of an individual to a server and to 
securely exchange a temporary session key. 
The authenticator contains additional in¬ 
formation that a server can compare to the 
ticket to prove that the user presenting the 
ticket is the same one to whom the ticket 
was issued. 

File service. Athena workstations are 
dataless nodes supported by extensive file 
service. Athena has three different file ser¬ 
vices and in principle supports an arbitrary 
number of other file services. One service, 
Remote Virtual Disk (RVD), holds read¬ 
only files such as system software libraries 
and some applications software. Another, 
Sun NFS, holds read/write files. The third, 
AFS, also holds read/write files but is es¬ 
pecially useful for files used for coopera- 

On user request additional file systems 
can be mounted via the attach command. 
File systems are named objects. Hesiod 
resolves the names to location, type, and 
mount point. User customization of the 
name space is an important capability. 

RVD. Workstation software includes a 
considerable amount of library software. 
Storing this software on each individual 
workstation might improve performance 
but would lead to excessive cost and would 
greatly complicate the software update and 
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software integrity problems. Providing the 
library software in its entirety would re¬ 
quire large local disk resources. Outboard 
file service, however, must be able to sup¬ 
port high enough client-to-server ratios 
that a high degree of redundancy is prac¬ 
tical. 

To solve these problems, Athena uses 
RVD 14 to store system software libraries. 
RVD was originally developed at the MIT 
Laboratory for Computer Science and sub¬ 
sequently enhanced in Project Athena. RVD 
supports logical “packs” on network server 
machines that appear to a workstation to be 
the same as local physical disk packs. All 
file system information is maintained by 
the workstation, and the RVD servers sim¬ 
ply deliver requested disk blocks. An RVD 
pack may be used by many workstations in 
a read-only mode or by a single worksta¬ 
tion in an exclusive read/write mode. Be¬ 
cause of the efficiency of the block-level 
service, an RVD server can support about 
10 times as many users as a generalized 
file server. Athena provides this system 
library service redundantly on a per-subnet 
basis. 

NFS. An Athena design requirement is 
location independence, so that any user 
can use any workstation. NFS provides the 
capability for private user files to be avail¬ 
able at any workstation. Private files are 
allocated as “lockers.” Lockers are stored 
on network file servers distributed across 
the system, but they appear to the user in a 
single, local file directory. The files must 


be explicitly attached to the workstation 
file hierarchy, but this is done transparent¬ 
ly by .login for home directories. Normal 
NFS security and privacy facilities are pro¬ 
vided. 

Printing. Conventional time-sharing 
systems provide local printing. The use of 
this model in a workstation environment 
creates two problems: print queuing and 
printer configuration. 

Unix normally queues the print file on 
the workstation, with no indication of 
whether the requested printer is accepting 
jobs. If the user logs off, the next user may 
trash the spooled file before it gets printed. 
The possibility also exists that the spooled 
file will never get printed because the printer 
is not accepting jobs. Finally, sending a 
print request to a particular named printer 
is an arbitrary limitation on the manner in 
which the print request is eventually ser¬ 
viced. 

In Athena the Ipr Berkeley print spooler 
has been modified to queue the print file at 
the remote print server. If the print server is 
not available, an immediate error message 
is generated. 

A second problem is the configuration 
problem, which is similar to the password 
problem. The printcap file would normally 
be stored on every workstation in a static 
form. Athena has moved the printcap 
function to the Hesiod name server, per¬ 
mitting configuration control to be sepa¬ 
rated (logically) from the print service lo¬ 
cation. 


Electronic mail. In a time-sharing 
system, users send mail to remote individ¬ 
uals by using a mail address of 
“username@absolute-path-name” or to lo¬ 
cal individuals by using an address of sim¬ 
ply “username” with the remainder of the 
address as a default. An Athena require¬ 
ment is that any user can use any worksta¬ 
tion. Therefore, absolute path names are 
not appropriate because individuals are not 
limited to one system. 

The approach developed for Athena, 
shown in Figure 3, combines the best of 
local and remote approaches. All individu¬ 
als are addressed as though they were lo¬ 
cal, without using a machine name. The 
mail is sent to a central mail hub and then 
to a “post office,” where the mail is queued 
until the addressee decides to pick it up. 
The addressee picks up the mail by trans¬ 
ferring it from the addressee’s post office 
(based on Hesiod information) to the ad¬ 
dressee’s private (NFS) mail file (also based 
on Hesiod information). The addressee then 
can read, write, and edit mail from any 
workstation just as if everything were actu¬ 
ally local. 

To accomplish this, Athena uses the Mail 
Handler (MH) mail system. An improved 
graphical front end (called XMH) based on 
the X Toolkit has been added to MH so that 
all commands are entered through mouse 
selection of active objects instead of the 
command line interface. The Post Office 
Protocol utilized by MH has been retained 
and modified to require the use of the 
Kerberos authentication server. Multiple 
post office servers are provided as required 
for load management and reliability. MH 
uses information in the Hesiod name server 
to select the proper post office for each 
individual. All changes to MH to support a 
distributed system are transparent to the 
user, and the user uses the software as if it 
were on a single, centralized time-sharing 
system. 

Users outside of Athena can also send 
mail to individuals within Athena as 
if it were a single, centralized system. 
They send mail to the address 
“username@athena.mit.edu.” This mail 
goes to the mail hub and is distributed by 
the same mechanism as internal mail. 

The mail hub also handles distribution 
lists within Athena. At this time there are 
400 mailing lists, and a total of 9,000 mail 
messages per day cross the hub. These 
9,000 messages are handled by three post 
office servers supporting the 10,000 users. 

Real-time notification. There are occa¬ 
sions when real-time notification is use- 
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ful—for example, when new mail has ar¬ 
rived or when a file server is going to be 
taken out of service temporarily. Real-time 
notification is easily accomplished on a 
centralized time-sharing system because 
the identities of all individuals logged in 
are available in a single location. In a 
distributed system it is much more difficult 
because there is no central file holding this 
information, nor can the workstation’s re¬ 
port of this information be naively trusted. 

To meet this need, the Athena project 
has developed a real-time notification ser¬ 
vice called Zephyr. With this system a user 
can send a message immediately by using 
a single command, without knowing the 
location of the intended recipient or even if 
the recipient is logged in. Zephyr searches 
the active workstations to locate the re¬ 
cipient, and if the recipient is logged in, 
immediately creates a popup window with 
the message. The recipient can select classes 
of Zephyr messages of interest and suppress 
the rest. This capability operates within the 
constraints of privacy and permission. 

On-line consulting. An on-line con¬ 
sulting system, ole , which permits users to 
direct questions to consultants or other 
expert users logged in elsewhere on the 
network, has been developed for Athena. A 
set of stock answers is maintained for quick 
response to common questions. The student 
can access the answers through a menu 
system, and the consultants can return a 
standard answer electronically if appro¬ 
priate. If the consultant is not available, 
questions are automatically queued. If a 
question is difficult or remains unanswered 
when the user logs out, the answer may be 
returned by electronic mail. 

Discuss. Discuss is an electronic con¬ 
ferencing system that allows Athena users 
to communicate easily and effectively on 
specific subjects. At present about 100 
concurrent electronic meetings are in 
progress. The discuss program is authen¬ 
ticated by Kerberos and uses Zephyr to 
send real-time new-transaction announce¬ 
ments. The system evolved from an earlier 
one called forum , supported on Multics. 

System software 
development 

To support coherence at the application 
programming interface, most of the source 
code for Athena’s operating environments 
is the same on the two different workstation 
platforms. The source code is partitioned 


into a machine-independent section (the 
applications and most of the operating 
system) and a machine-dependent section 
to simplify the system-building process. 

The basic operating system software used 
on all Athena workstations and servers at 
this time is BSD 4.3, with machine-de- 
pendent software (such as device drivers) 
supplied by the manufacturers. The stan¬ 
dard Berkeley distribution is augmented 
by several third-party software packages 
and local Athena modifications and ad¬ 
ditions. 

To maintain control of the software 
configuration, all software is completely 
built from source code about once a year. 
Modules are updated three or four times a 
year. 

The new source code for the Athena 
distributed services is about 20 Mbytes. 
The total amount of source code for the 
Athena system, including Unix, the Athe¬ 
na distributed services, and applications, 
amounts to 400 Mbytes. The source code is 
structured into a hierarchy of about 1,300 
makefiles and generates 12,000 binary 
modules. 

To control the labor content and quality 
of the development, management, and 
support of this large amount of source 
code, the Athena project developed or 
imported a number of software tools, in¬ 
cluding 

• prot_sources —to manage access priv¬ 
ileges; 

• track (like rdist) —to manage distrib¬ 
uted files; 

• maksrv —a script set to convert work¬ 
station software to servers. 

Prot_sources gives a measure of protec¬ 
tion against aborts of system builds due to 
lack of access privileges. It allows soft¬ 
ware developers to start a build at any time 
without using root access and its lack of 
protection. Prot_sources provides four 
categories of protection: writable, execut¬ 
able, locked, and unlocked. It traverses the 
400 Mbytes of source code in about 1.5 
hours, reporting on its actions as they occur. 

Track creates a local file containing the 
update status of all the distributed files 
used for the system build. After the local 
file is complete, the system build process 
can compare local copies to the update 
status contained in track instead of com¬ 
paring against remote files, thus saving 
thousands of remote file accesses. 

Ideally, all software update should be 
entirely automatic and should propagate to 
all workstations essentially simultaneous¬ 
ly. Tools to do this in Athena are available 


for nonkernel code but not for kernel code. 
Presently, changing the kernel requires that 
each individual workstation be visited and 
the kernel loaded from a floppy disk (the 
“roller skate” approach). Work on auto¬ 
mating the update of workstation kernel 
software is proceeding. 

The makesrv tool builds server systems 
(such as printers and name servers) as 
modifications of a standard workstation 
system. The workstation software is ini¬ 
tially installed on servers. Building a serv¬ 
er from a workstation then becomes a stan¬ 
dard operation. Makesrv can build the 
server types of NFS, Hesiod, Kerberos, 
Moira, ole, RVD, Zephyr, discuss, and 
Printer (the server portion of Ipr). 

Future plans 

Because of the significant value of Project 
Athena to its two industrial sponsors, 
funding has been committed through June 
1991. The following new initiatives are 
planned for the distributed system during 
the remainder of the project: 

• Move to private ownership. To date, all 
Athena workstations are owned by MIT 
and are made available to students and 
faculty at no cost. When the price of a 
workstation meeting Athena standards drops 
to an appropriate level (currently seen as 
$3,000), MIT may sell workstations to stu¬ 
dents and faculty through the Microcom¬ 
puter Store. Eventually the number of 
workstations supported (primarily private¬ 
ly owned) will approach 10,000. The net¬ 
work, servers, and infrastructure must scale 
transparently in accordance with the number 
of workstations. 

• Shift to supported software. The strat¬ 
egy of Athena is to move away from Berke¬ 
ley Unix to a vendor-supported Unix. Since 
both major sponsors belong to the Open 
Software Foundation, the OSF/1 operating 
system looks attractive. (Project Athena 
also belongs to the Open Software Foun¬ 
dation and has a research grant relationship 
with it). 

• Automate software update and integri¬ 
ty checking. Installation of a new version 
of the system software is a major under¬ 
taking because it requires a visit to every 
workstation. Tools to install a new version 
of the system software over the network 
and to verify its integrity after installation 
are now being developed. 

• Provide dynamic network reconfigura¬ 
tion. One of the most common problems in 
Athena workstation installation is the in¬ 
stallation of an incorrect Internet address. 
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Experiments are underway to assign this 
address at boot time. In addition, when 
Athena begins to allow privately owned 
workstations, it must be possible for a user 
to unplug from one network connection and 
reconnect at a new location without notify¬ 
ing the network administration. Work on 
dynamic reconfiguration is also in process. 

• Support personal computers. The 
widespread availability of personal com¬ 
puters with screen resolutions of 300,000 
pixels makes them attractive. The degree 
of support and methods of support are now 
being investigated. 

• Deploy to other universities. Part of the 
original vision of Project Athena was that 
the system be available at no cost to other 
research labs and universities once it is 
fully operational. In late 1988 part of the 
system was installed at DEC’s Cambridge 
Research Laboratory. In early 1989 the 
entire distributed system was installed at 
Bond University, a new, private university 
in Australia. Subsequently, parts of the 
system have been installed and are in use 
at Iowa State University, the University 
of Massachusetts at Amherst, New York 
University, the University of Texas at 
Austin, North Carolina State University, 
and the University of California at Santa 
Cruz. Other installations are now being 
considered. ■ 


Further reading 

Athena is a very large project and 
cannot be fully covered in this article, 
which is limited to the distributed as¬ 
pects of the system. The following bib¬ 
liography lists sources of information 
on other aspects of the system, as well as 
further reading on its distributed as¬ 
pects. 

Cohen, K.C., “Project Athena—Year 5 Stu¬ 
dent Survey Findings, 1988,” MIT Report, 
June 1988,33 pp. [pedagogical aspects of the 
project] 

Coppeto, T., et al., “OLC: An On-line Con¬ 
sulting System for Unix,” Usenix Conf. Proc., 
Usenix, Sunset Beach, Calif., Summer 1989, 
pp. 83-94. 

Davis, Don, “Project Athena’s Release Engi¬ 
neering Tricks,” Proc. Usenix Workshop on 
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Multimedia Conferencing on 
Local Area Networks 
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T echnological advances in the de¬ 
sign of packet networks have add¬ 
ed to the services that these net¬ 
works offer. Research continues 
on the feasibility of using packet networks as a 
medium for such time-constrained data as 
real-time voice and video. Much research 
has concentrated on the integration of voice 
and data over one network, 16 especially with 
two-party connections. A few papers ad¬ 
dress the problem of multiparty conference 
connections. 5 ' 7 The question of the manag¬ 
ing and implementing multiparty, multi- 
media conferences needs to be formally 
addressed. 

This article considers management and 
implementation procedures for data delivery 
in multiparty, multimedia conferences on 
local area networks. Such conferences 
would be particularly useful in scientific, 
military, and business environments, where 
several remotely located people need to 
review and discuss the same data simulta¬ 
neously. 

Our earlier work introduced and analyzed 
techniques for managing and implement¬ 
ing voice-only conferences. 8 '" This article 
extends those results and outlines the re¬ 
quirements and mechanisms for delivering 
multiple information types: voice, video, 
file, memo, screen, and keyboard data. The 
mechanisms presented are appropriate for 
both intranetwork and (homogeneous and 


A logical-ring shuttle 
packet can be used to 
deliver voice, 
acknowledged, and 
unacknowledged data 
for efficient multimedia 
conferencing using 
off-the-shelf PC 
hardware. 


heterogeneous) internetwork conferences. 
We also examine them for their applicability 
to networks with and without multicast 
transmission capabilities. But first, we 
discuss conference management issues and 
review our experiences in designing and 
experimentally implementing voice-only 
and multimedia conference data-delivery 
schema. 


Conference 

management 

For conferencing, a communications 
protocol must provide conference-unique 
services, allowing a user to 

• initiate a multiparty conference, 

• request to join an ongoing conference, 

• invite another user to enter an ongoing 
conference, 

• voluntarily leave a conference, 

• remove a participant from a conference, 
and 

• obtain data transmission privileges. 

Table 1 shows a typical set of service 
primitives that would be available to a user 
of a communications protocol supporting 
conferencing. 10 They can be used directly 
to provide the conferencing capabilities 
listed above. (Note that each service 
primitive would have different subtypes, 
such as request and indication, as well as a 
parameter list associated with it.) 

In a two-party connection, an entity must 
keep track of the status of only one other 
entity: the one it is connected to or is trying 
to connect to. A conference, on the other 
hand, requires an entity to keep track of the 
status of more than one other entity. The 
conference management service must be 
able to create a connection between multi- 
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Table 1. Conference service primitives. 


Primitive 

Function 

Conference 

Initiation and Entrance Primitives 

C-Invite: 

Request a conference with other stations 

C-Accept: 

Accept a conference invitation 

C-Reject: 

Reject a conference invitation 

C-Revoke: 

Revoke a conference invitation 

C-Join: 

Request to join an ongoing conference 

Conference 

Exit Primitives 

C-Leave: 

Request to leave an ongoing conference 

C-Remove: 

Request to remove a participant from an ongoing conference 

Conference 

Data Transfer Primitives 

C-Data: 

Request to begin transmission of data 

C-Data-End 

1: Request to end transmission of data 

Miscellaneous Service Primitives 

C-Hold: 

Request to suspend conference participation temporarily 

C-Reconnect: Request to resume conference participation 


pie entities, allow other entities to be added 
to and deleted from the conference con¬ 
nection, and determine when a conference 
connection has been terminated. 

Past approaches have typically relied on 
a centralized controller to manage confer¬ 
ences. 7 Elsewhere we introduced a distrib¬ 
uted conference management mechanism. 10 
The procedure is that a conference con¬ 
nection be viewed as a logical ring of par¬ 
ticipants, similar to the logical ring of the 
IEEE 802.4 token-passing bus protocol. 12 

In the token-passing bus protocol, a log¬ 
ical ring is maintained to pass a token from 
station to station. The token permits station 
access to the network. Each station keeps 
pointers to its logical predecessor and logical 
successor to maintain the logical ring. The 
dynamic addition and deletion of stations 
in the logical ring is an inherent property of 
the 802.4 protocol. 

Similarly, a conference connection can 
be managed by establishing a logical ring 
of participants in which each participant 
knows only the participating entity before 
it (its predecessor) and after it (its succes¬ 
sor). Many concepts used for setting up 
and maintaining the logical ring of the 
token-passing bus can then be applied for 
setup and maintenance of the conference 
connection. Specifically, the primitives of 
Table 1 and the logical ring mechanisms 
can efficiently implement conference ini¬ 
tiation, expansion, contraction, and termi¬ 
nation. Also, the logical ring management 
mechanism is a distributed control scheme 
with no need for a centralized conference 
manager. 

Conference data 
delivery requirements 

Depending on the type of information 
being transmitted, data delivery, process¬ 
ing, and presentation have different re¬ 
quirements. Here we examine the require¬ 
ments for group delivery of several 
information types. 

Voice. Voice data is time-constrained, 
requiring each participant’s voice data to 
be delivered to and processed by all other 
conference participants in real time. In 
addition, for natural voice conferencing, 
the voice-delivery subsystem should ac¬ 
commodate the possibility of multiple, si¬ 
multaneously active speakers. When sev¬ 
eral speakers are active, speech samples 
from the individual speakers must be com¬ 
bined before playback. Such a delivery 


subsystem could be a bit lossy without 
affecting overall speech quality. 

File/memo. During a conference, a par¬ 
ticipant may wish to send a copy of a file 
(or a brief memo composed at the keyboard) 
to all other participants. This requires ac¬ 
knowledged, error-free transfer of a possibly 
large amount of data to all participants. 

Screen. All participants may want to 
view the dynamic contents — documents, 
data, or images — of one participant’s 
screen. To accommodate such screen fea¬ 
tures as paging and scrolling, data must be 
delivered with relatively short delay. If the 
sender’s screen is to be continually re¬ 
transmitted, an unacknowledged delivery 
scheme could be tolerated, because a new 
screen update would follow straightaway. 

Keyboard. Another useful conference 
feature would allow a participant to send 
keystrokes to a second participant. The 
principal characteristic here is that deliv¬ 
ery is needed only point-to-point, not to all 
conference participants. Keystrokes would 
be directly piped into an application pro¬ 
gram running at the receiving participant’s 
workstation. 


As an example, in the group editing of a 
technical paper, one participant might bring 
up a word processing program to edit a file. 
This participant’s screen would then be 
sent to all other conferees. The conferees 
could then verbally discuss the commonly 
viewed screen of information. A second 
conferee might then wish to edit the file 
directly. The second participant would send 
keystrokes to the first participant’s station 
for direct input into the word processing 
program. 

A similar example is computer-based 
teaching. The instructor’s screen would be 
disseminated to all students’ terminals, and 
individual students could be called upon to 
enter data from their desktop terminals. 

Video. Video data has characteristics 
similar to voice data in that it must be 
delivered in real time, but at a higher data 
rate. On the other hand, the acceptable 
error rate for video data is typically lower 
than that for voice data. Furthermore, if 
multiple images are to be viewed simulta¬ 
neously (for example, in a split-screen sys¬ 
tem), the individual images must be kept 
separate. This is different from handling 
voice data, where multiple speech samples 
can be combined before playback. 
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Figure 1. Multicast transmission. 


Voice delivery schema 

During a voice conference call on an 
analog, circuit-switched network, when 
more than one person speaks at a time, 
there are usually no difficulties at the re¬ 
ceiver’s end. This is because the signals 
produced by the individual speakers can be 
directly combined at the receiver by the 
analog system. On the other hand, when 
voice is digitized and sent out in packets, 
the receipt of voice packets from more than 
one source can be a problem. A single 
digital-to-analog converter cannot handle 
multiple samples from multiple sources 
without preprocessing. 

In voice conferences, speaking privileg¬ 
es are either regulated or unregulated. In a 
regulated conference, a control mechanism 
is needed to grant speaking privileges to 
participants. An unregulated conference 
allows all participants to speak at will, and 
is the natural model of a voice conference. 

Regulated speech control. In regulated 
speech control, only one user is allowed to 
talk at a time with each user talking in turn. 
A scheme described by Forgie 7 used a 
central controller, called the Chairman, to 
decide who has the right to speak next. A 
user would send a request to speak to the 
Chairman, who would put the request in a 
queue. The Chairman would tell users when 
their turns came up. 

Viewing the conference connection as a 
logical ring of conference participants, a 
similar scheme, wherein participants speak 
in turn, can be used without a central con¬ 
troller. A token is sent around the logical 
ring, and participants do not obtain speak¬ 



ing privileges until they receive the token. 

In a possible implementation of this 
scheme, a user would invoke the C-Data 
service primitive (see Table 1) to obtain 
speaking privileges. This primitive tells 
the local conference manager to capture 
the next available token. When it gets the 
permission (token), the participant can then 
initiate a voice data stream. When voice 
data transmission is terminated, the token 
is passed through the C-Data-End primi- 

The Chairman scheme provides a “fair” 
first-come-first-served method of granting 
speaking privileges, but at the expense of 
complexity and possible bottlenecking at 
the Chairman. In contrast, token-regulated 
speech control is distributed, eliminating 
the centralized bottleneck. However, it may 
not always provide a first-come-first-served 
speaking order. 

Unregulated speech control. In unreg¬ 
ulated speech control, all conference par¬ 
ticipants can speak simultaneously, and a 
participant need not ask for permission to 
speak. The C-Data primitive sends a par¬ 
ticipant’s voice data stream any time he or 
she has voice data. Unregulated speech 
control is better than regulated speech con¬ 
trol because it models the natural mode of 
a real conference. (Any restrictions on user 
speaking order should be dealt with at the 
user level, for example, with parliamenta¬ 
ry procedure.) 

Unregulated conference speech control 
leads to an interesting implementation 
question: How are packet streams from 
multiple sources to be combined for play¬ 
back at a receiver? In previous work, 810 we 
presented alternate implementation mech¬ 


anisms for unregulated conferences in both 
intranet and internet scenarios. The first 
method used multicast transmission of voice 
packets, while the second used transmis¬ 
sion of a shuttling voice packet around a 
logical ring of conference participants. (For 
conferences across interconnected net¬ 
works, two versions of the shuttle method 
were described.) We showed that the method 
using the shuttling voice packet was better 
because it was easier to apply to both 
multicast-capable and nonmulticast-capa¬ 
ble network configurations. In addition, 
the shuttle method was more efficient with 
respect to station, network, and gateway 
work load. 

Multicast transmission. With multicast 
transmission of voice packets, each con¬ 
ference participant station transmits each 
of its packets containing actual speech (voice 
packets) to all the other conference partic¬ 
ipants, as shown in Figure 1. Assume a 
conference with N participants and peri¬ 
odic generation of voice packets (no si¬ 
lence-detection algorithms used). During 
each voice-packet generation cycle, each 
participant would generate and transmit a 
single voice packet and receive N- 1 voice 
packets. These N -1 packets would then be 
combined at each receiving station and 
played back. (This is the method used in 
the Etherphone system. 6 ) Figure 2 shows 
an internetwork conference, where the 
gateway receives packets from each net¬ 
work and forwards them to the other net¬ 
work. The ability to multicast on the net¬ 
work level is key to successful 
implementation of this scheme. (The pro¬ 
cedures when using silence-detection al¬ 
gorithms are discussed elsewhere. 9 ) 
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Figure 3. Logical ring. Figure 4. Internetwork conference with a single logical ring. 



Figure 5. Internetwork conference with multiple logical rings. 


Logical ring transmission. With the 
method using logical ring transmission of 
voice packets, a single voice packet con¬ 
taining the combined speech from all par¬ 
ticipants is shuttled around the logical ring 
of conference participants in a point-to- 
point manner (Figure 3). The shuttle packet 
makes one complete trip around the logical 
ring during each voice-packet generation 
cycle. As each participant receives the 
shuttle packet, the participant’s station 
performs the following: 

• removes its own contribution to the 
combined speech samples, 

• schedules the packet for playback, 

• “adds” its new voice packet to the 
combined speech samples in the shut¬ 
tle packet, and 

• transmits the shuttle packet to its log¬ 
ical successor. 

At any given time, each voice sample 
within the shuttle packet contains the 
combined, sampled signal from the last 
voice packet generated at each of the N 
conference participants’ stations. Thus, the 
size of the information field of the shuttle 
packet is independent of the number of 
participants. The method of combining 
samples depends on the voice encoding 
scheme used. 

For internetwork conferences, two vari¬ 
ations on the shuttle method are possible: 
single logical-ring transmission and 
multiple logical-ring transmission. 

With the single logical-ring method, the 
entire set of internetwork conference par¬ 
ticipants is viewed as a single logical ring. 
To minimize network crossover (the number 
of stations whose successors are in another 
network), the logical ring established should 


be constructed in the shape of a figure eight 
with the gateway at the articulation point 
(Figure 4). The single shuttle packet is 
shipped around this figure eight. The 
gateway transfers it from one network to 
the other unchanged. Thus, in one packet- 
generation cycle, the shuttle packet must 
traverse all networks and be processed by 
all stations. 

The multiple logical-ring approach also 
uses a shuttle packet, but the internet¬ 
work conference is viewed as broken into 
multiple logical rings, one for each phys¬ 
ical network, joined at the gateway. As 
Figure 5 shows, the gateway participates 
in all logical rings. Each ring contains its 
own shuttle packet, so the gateway receives 
the shuttle packet of a given logical ring, 
combines it with the shuttle packet of the 


other rings, and forwards the resultant 
packet to the gateway’s logical successor 
on the original ring. The gateway must do 
this for each of the logical rings and process 
packets, rather than merely transfer them 
between networks. However, station-pro¬ 
cessing in each physical network can be 
performed in parallel, reducing the overall 
shuttle packet cycle time. 

Comparison of methods. Comparing 
these methods, note that the shuttle packet 
method does not require multicast trans¬ 
mission capabilities. Hence, this procedure 
is well suited for both multicast-capable 
and nonmulticast-capable network config¬ 
urations (as long as the shuttle packet 
traverses the logical ring in real time). 

We have analyzed these alternative 
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Figure 6. Station workload versus N. 


methods for implementing unregulated 
conference speech control, 8 ' 10 comparing 

• the amount of work individual stations 
must perform to participate in a con¬ 
ference, 

• the amount of work a gateway must 
perform to achieve network intercon¬ 
nection for the conference, 

• the network work load, and 

• the maximum number of participants 
in an individual conference. 

Figures 6 through 9 graphically present 
selective, quantitative results comparing 
the methods. In these figures, the nonvarying 
parameters are 


Sample size 
Sampling frequency 

Voice packet size 
Capacity 
“Transmit” time 
“Receive” time 
“Add” time 
“Remove” time 
Gateway transfer time 


8 bits 

8,000 samples/ 
second 
256 samples 
10 Mbps 
1 psec/sample 
1 (isec/sample 


1 psec/packet 


Figure 6 shows the percentage of avail¬ 
able CPU time a single station devotes to 
conference processing, as a function of the 


number of conference participants. Curves 
show results for different “add” times. The 
station work load is independent of wheth¬ 
er the conference is intranet or internet. 
Consequently, the station work load is 
identical for single logical-ring and multiple 
logical-ring transmission, and a single curve 
shows results for both. 

The graph clearly shows that for logical 
ring transmission, station work load is in¬ 
dependent of the number of conference 
participants. Furthermore, for larger values 
of f add , multicast transmission may result in 
as much as 70 percent of available CPU 
time spent in processing conference pack¬ 
ets. 10 The constant station work load of 
logical ring transmission is desirable for 
multitasking stations not dedicated solely 
to processing a conference. 

Figure 7 shows the percentage of avail¬ 
able CPU time that a gateway devotes to 
conference processing as a function of the 
number of conference participants. This 
graph shows that with multicast transmis¬ 
sion, the work load on the gateway is 
highly dependent on the number of con¬ 
ferees, whereas single logical-ring and 
multiple logical-ring transmission are in¬ 
dependent of this parameter. 8 

Figure 8 plots the maximum numbers of 
participants in a single conference (A max ) as 


a function of the capacity of network 2. 
Figure 9 plots station and gateway work 
load percentages for two high-capacity (100- 
Mbps) networks versus N, with all other 
parameters as above. 

Figure 8 shows that when both networks 
are intermediate or high capacity, multicast 
transmission and multiple logical-ring 
transmission are comparable with respect 
to V max . However, Figure 9 clearly illustrates 
the high station and gateway overhead 
imposed by multicast transmission relative 
to multiple logical-ring transmission. 8 

Overall, our previous work shows that 
the methods using the shuttling voice packet 
are better. 810 The principal reason is the 
invariance of station and gateway work 
load with respect to both conference size 
and speaker activity. 9 In addition, the 
shuttle packet method is more easily applied 
to both multicast-capable and nonmulticast- 
capable network configurations. 

We must make one final comparison 
between the multicast and shuttle methods. 
In general, the various stations attached to 
a given network can be of different types 
with different processing capabilities and 
work rates. For the multicast method, 
however, such differences can cause ran¬ 
dom implementation problems. A given 
station participating in an V-way confer- 
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Figure 8. N mal as a function of capacity (network 1 capacity is 10 Mbps). 
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Figure 9. Workload percentages versus N. 


ence is required to receive a separate voice 
packet from each active speaker within 
each voice-packet generation cycle. Since 
each voice packet is multicast to all confer¬ 
ees, a voice packet would normally be sent 
without acknowledgment requirements. 
Consequently, a slower station could be 
processing (reading in) a newly received 
voice packet from its network interface 
buffer and miss (because its receive buffer 
is still full) the next multicast voice packet 
generated by a faster station. 

Whether a particular packet would be 
missed by a station depends on how the 
cyclic transmissions align and stagger 
themselves. We have observed missed 
packets in our experiments. The problem is 
avoided with logical ring transmission, 
because the shuttling packet is transmitted 
point to point. 

Multimedia data 
delivery schema 

A multimedia conference permits the 
distribution and sharing of such data as 


files, memos, and screens among all partic¬ 
ipants in an active voice conference. In a 
voice conference, real-time delivery of the 
speech information is paramount (even at 
the expense of an occasional lost voice 
packet). On the other hand, for other data, 
real-time delivery may not be of utmost 
importance. For example, in the delivery 
of files, data integrity and assurance of 
delivery to all conference participants are 
crucial rather than real-time delivery. 

Most implementations of integrated voice 
and data systems separate the delivery of 
the two information types. A pair of users 
who wish to exchange both voice and data 
would, in effect, have to set up two sepa¬ 
rate connections, one for voice and one for 
data. Here we propose that the shuttle packet 
method be extended to allow a single con¬ 
nection to handle the delivery of both in¬ 
formation types. Figure 10 shows an ex¬ 
panded shuttle packet information field 
that includes both a fixed-length field for 
speech and two variable-length data fields, 
one providing acknowledged data delivery 
and the other unacknowledged delivery. 

As before, the speech field contains the 


combined speech samples from all confer¬ 
ence participants and is designed to shuttle 
around the logical ring of participants for 
real-time delivery of the speech samples. 

Access to the acknowledged data field is 
regulated by a flag that marks the field as 
either empty or full. Any conference par¬ 
ticipant detecting an empty data field can 
place data into the field and mark the field 
full. The acknowledged data will circulate 
around the logical ring until each partici¬ 
pant has made a copy. (The speech field of 
the shuttle is continually updated, regard¬ 
less of the delivery status of the acknowl¬ 
edged data.) To allow for unequal process¬ 
ing capabilities of stations, a separate flag 
indicates whether the data present is new 
and making its initial trip around the log¬ 
ical ring or old and being retransmitted 
because it has not yet been copied by all 
conference participants. (A monitoring and 
time-out mechanism can be included for 
maintenance and error handling.) After all 
participants have copied the data, the field 
is marked empty. This mechanism provides 
a simple procedure for furnishing ac¬ 
knowledged delivery of multicast data. 
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Figure 10. Integrated frame structure for voice, screen, and data. 


As with the acknowledged data field, 
access to the unacknowledged data field is 
regulated by a flag indicating availability. 
An application that could use such data 
delivery would be continuous screen trans¬ 
mission. The screen activity of one of the 
conferees would be continually sent to all 
other conference members. Nondelivery 
of a packet would have minor consequenc¬ 
es, because a refresh of the screen would 
follow shortly. 

Experimental 

implementations 

Both the multicast and shuttle methods 
for voice conferencing have been experi¬ 
mentally implemented in the Brooklyn 
College Local Area Networks Laboratory. 
In addition, the shuttle packet method pro¬ 
viding for integrated voice and data con¬ 
ferencing has been successfully realized. 

The laboratory currently consists of an 
IBM PC AT file server and seven remote 
workstations (three 20-megahertz Com¬ 
paq 386/20s, two 6-megahertz IBM PC 
ATs, and two 4.77-megahertz IBM PCs). 
Four portables (two 12-megahertz Toshi¬ 
ba 3200s and two 4.77-megahertz Compaq 
PCs) are connected to the network as need¬ 
ed. The workstations and file server are 
networked together with three different 
networks; a 3-Com Ethernet, a Proteon 
Pronet 10-megabits-per-second token ring, 
and an IBM token ring. Each station has 
interface boards to each of the networks. 

The voice board used in the experimen¬ 
tal implementations is the IBM Voice 
Communications Adapter, which contains 
twin analog/digital and digital/analog 
channels, as well as interfaces for two 
phone lines, a telephone, a microphone, 
and a speaker. The heart of the adapter is a 
Texas Instruments TMS32010 digital sig¬ 
nal processor with an instruction cycle time 
of 200 nanoseconds. 


We have implemented each of the un¬ 
regulated voice-only conference imple¬ 
mentation mechanisms, as well as the shut¬ 
tle packet method providing multimedia 
data conferencing, on both the Ethernet 
and the Pronet. The voice-encoding scheme 
used is 8-bit companded PCM at an 8- 
kilohertz sampling rate. At present we use 
a fixed-size voice information field of 256 
samples. 

For the multicast method, the technique 
for combining PCM samples is to expand 
(linearize) the PCM samples received and 
use linear superposition to sum the result¬ 
ant samples. For the shuttle methods, the 
received voice samples are first expanded 
(linearized) and then the station’s previous 
packet subtracted, making the resultant 
packet suitable for playback. A new voice 
information field is then readied by linear¬ 
ly adding in the station’s new voice packet 
and compressing the resultant samples. 
Linear superposition of the individual 
speaker waveforms minimizes the effects 
of any possible overflow. 

For multimedia data, the shuttle packet 
contains two variable-length data fields 
(the unacknowledged and acknowledged 
data fields), each with a maximum size of 
256 bytes. Each data channel provides for 
a maximum throughput of 64 kilobits per 
second. The fields are processed as de¬ 
scribed earlier. 

In addition to intranetwork conferences, 
we have implemented gateway (bridge) 
programs to permit internetwork commu¬ 
nication between Ethernet and Pronet. 
Gateway software realizing internetwork 
voice/data conferences for both single 
logical-ring and multiple logical-ring 
transmission have been successfully im¬ 
plemented. 

As the experimental system was designed 
to measure feasibility of multimedia data 
delivery, we used simple user interfaces to 
invoke conference services (for example. 
Make Conference, Send Data, and Stop 
Conference). A conference is established 


as a background task, allowing other fore¬ 
ground activity at the workstation. Confer¬ 
ences of five participants (three Compaq 
386/20S and two IBM PC ATs) were suc¬ 
cessfully tested, as well as simultaneous 
conferences of subsets of these stations. 
(Larger conferences could not be tested 
because of our shortage of voice boards.) 
In all tested conference scenarios, the sub¬ 
jective voice quality was deemed natural. 
When executing interactive foreground 
applications, system degradation due to 
conference overhead was minimal (see 
benchmarks sidebar on next page). 

Applications software. We have writ¬ 
ten and tested applications software using 
the voice, acknowledged, and unacknowl¬ 
edged data fields of the shuttle packet for 
file transfer, memo distribution, and screen 
dissemination concurrent with speech 
transfer. 

Files are transmitted asynchronously with 
the acknowledged data field. Although it is 
interrupt-driven, we have initially imple¬ 
mented the file-transfer facility to run as a 
foreground application. 

Memo distribution allows the user to 
compose messages at the keyboard for dis¬ 
play on other conferees’ screens. The im¬ 
plementation is realized using the file- 
transfer mechanism. 

Screen dissemination using the unac¬ 
knowledged data field is not the distribu¬ 
tion of a single screen of data. Such a 
facility is easily implemented using file 
transfer, and transmission of a single screen 
should be acknowledged. Continual trans¬ 
mission of one workstation’s successive 
screens to other conference members, 
achieved using unacknowledged data 
transfer, relies on a periodic interrupt to 
trigger screen capture and transmission, 
making the capability totally transparent to 
the running application. 

A natural extension to having all confer¬ 
ees view a single process is to allow the 
conference members to control the appli¬ 
cation remotely. During a screen sharing 
session, any participant may request con¬ 
trol of the application. If the workstation 
running the application (the hosting sta¬ 
tion) has not locked out the others and no 
other station has been granted such control, 
the request is granted. At this point, the 
hosting station and the requesting station 
share control. All subsequent keyboard input 
at the remote station is transmitted to the 
hosting station and piped into the applica¬ 
tion. The keyboard data is transmitted us¬ 
ing the acknowledged data field. Because 
keyboard data is redirected by capturing 


September 1990 


59 










Benchmarks 


We ran benchmark tests for the 
logical ring implementations and vari¬ 
ous network configurations contain¬ 
ing different types of workstation and 
gateway processors. 

The first test determined the pro¬ 
cessing overhead incurred by a con¬ 
ference-participating station or gate¬ 
way. We executed a foreground 
CPU-bound program with and without 
a voice/data conference in the back¬ 
ground. The percentage of CPU time 
devoted to the conference could then 
be calculated by examining the two 
running times. This provided a mea¬ 
sure of performance degradation of 
either a station or a gateway during 
voice/data conference participation. 
Table A lists the results. 

The station work load measured 
was the same for both Ethernet and 
Pronet, because of the nearly identi¬ 
cal code fragments used for driving 
the two network boards. In addition, 
in assessing implementation feasibili¬ 
ty, the Ethernet results were derived 
in a contention-free experiment. 

When users run an application pro- 
giam while participating in a confer¬ 
ence, they notice no degradation of 
performance when using either 12- 
megahertz 80286 or 20-megahertz 
80386 workstations. Thus, voice/data 
conferences are practical with exist¬ 
ing off-the-shelf hardware. 

The second test measured the min¬ 
imal time a station (or gateway) re¬ 
quired to process and forward the 
shuttle packet. This could then be 
used to calculate the number of sta¬ 
tions supportable within a single 
voice/data conference. As the voice 
subsystem forces a periodic genera¬ 
tion of voice packets, thus fixing the 
logical ring traversal time, periodic 
voice-packet generation was by¬ 
passed to calculate the minimal tra¬ 
versal time. A single voice packet 
with data was generated and sent 
around the system, without any con¬ 
siderations of periodicity. Each work¬ 
station and gateway performed its 
normal packet processing and for¬ 
warded the packet as soon as possi¬ 
ble. Initially, the test was run by cy¬ 
cling the shuttle packet around the 
logical ring a fixed number of times, 
allowing the traversal time to be cal¬ 
culated for a conference consisting 
solely of a pair of identical worksta¬ 
tions. The minimal process and for¬ 
ward time for that workstation type 


could then be calculated by halving the 
traversal time. Table B shows process 
and forward times for additional work¬ 
station or gateway types, calculated by 
adding them to the conference and re¬ 
running the test. 

The traversal time is useful in deter¬ 
mining the maximum number of work¬ 
stations that can participate in a single 
conference. 810 For example, given an 
interpacket generation time of 32 milli¬ 
seconds (assuming an 8-kilohertz sam¬ 
pling rate with 256 samples per packet) 
and the above benchmarks, we can ex¬ 
pect a maximum of ten 20-megahertz 
80386 workstations in a single intranet¬ 
work conference. A general inequality 
allows the calculation of the maximum 
size of a single intranetwork confer¬ 
ence with heterogeneous workstations. 
This inequality is 

Z N/TWi < 32 

where A/, is the number of workstations 
of type / and TW) is the process and 
forward time for workstation i. 

We calculate the maximum size of an 
internetwork conference using a single 
logical ring with an analogous inequali¬ 
ty. For example, for an internet confer¬ 
ence between an Ethernet and a Pro- 
net, the inequality is 

TGis + Z N n TW,j < 32 


where N u is the number of worksta¬ 
tions of type i on network j, TW U is the 
process and forward time for a work¬ 
station of type / on network j, and TG is 
is the process and forward time for a 
gateway of type / using a single logical 
ring. 

For internetwork conferences using 
dual logical rings, the maximum num¬ 
ber of participants within a given logical 
ring is independent of the number of 
participants in the other logical ring, 
because the two logical rings operate 
in parallel. The limiting inequality for 
each logical ring is 

TG lm + Z N n TW n < 32 


where TG im is the process and forward 
time for a gateway of type / using multi¬ 
ple logical rings. Multiple logical rings 
can support a much larger conference 
than a single logical ring. 


Table A. Percentage of process¬ 
ing capability devoted to confer¬ 
ence participation. 


Processor I 

Type 1 

Processing 

Percentage 

Workstation on an Ethernet 

20-MHz 80386 

7.75 

12-MHz 80286 

10.49 

6-MHz 80286 

17.01 

4.77-MHz 8088 

41.37 

Workstation on a Pronet 

20-MHz 80386 

7.75 

6-MHz 80286 

17.06 

4.77-MHz 8088 

41.37 

Gateway (single logical ring) 

20-MHz 80386 

14.51 

6-MHz 80286 

32.19 

Gateway (multiple logical rings) 

20-MHz 80386 

15.97 

6-MHz 80286 

35.40 


Table B. Minimal process and 
forward time. 


Processor Type 

Time (ms) 

Workstation on an Ethernet 

20-MHz 80386 

2.96 

12-MHz 80286 

3.45 

6-MHz 80286 

5.82 

Workstation on a Pronet 

20-MHz 80386 

2.95 

6-MHz 80286 

5.74 

Gateway (single logical ring) 

20-MHz 80386 

5.93 

6-MHz 80286 

11.52 

Gateway (multiple logical rings) 

20-MHz 80386 

3.35/ring 

6-MHz 80286 

8.34/ring 
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the keyboard interrupts on both the con¬ 
trolling and hosting stations, the facility is 
transparent to the application. 

In a group sharing mode, we have run 
many end-user applications (for example, 
DOS commands, Word Perfect) concur¬ 
rently with speech transfer using the screen/ 
keyboard data capability. The tests were 
successful over both intranet and internet 
conferences, with the speech subjectively 
judged as natural and no noticeable deg¬ 
radation of the application. 

Noise control. Logical ring transmis¬ 
sion has one drawback. The integrity of the 
shuttling voice packet must be maintained. 
If noise corrupts the voice samples within 
the packet, the noise remains in the packet 
for the entire conference. Hence a manage¬ 
ment scheme is needed to reduce the effects 
of any possible noise. An approach would 
be to enable stations to detect when only 
one speaker is active, at which point a 
fresh, noise-free shuttle packet could be 
issued. 

A related problem is losing a shuttle 
packet. Resolution can be achieved with a 
recovery mechanism analogous to the claim- 
token procedures of either the IEEE 802.4 
or 802.5 token protocols. Specifically, if a 
station ever has two voice packets in its 
buffers ready for transmission, it will 
conclude that the shuttle packet has been 
lost and begin to contend for the right to 
issue a new shuttle packet. Contention 
resolution could proceed according to 802.4 
or 802.5 procedures. 


W e have successfully imple¬ 
mented limited multimedia 
conferencing using the shuttle 
packet methods. Benchmark tests and our 
hands-on experience with concurrent ap¬ 
plication and conference execution have 
shown the feasibility of integrated voice/ 
data conferencing using off-the-shelf 
hardware. We have realized applications 
programs implementing conference file/ 
memo transfer, screen distribution, and 
remote keyboard entry. We are investigat¬ 
ing enhancements to include video and 
extensions of the techniques to such high¬ 
speed networks as FDDI (Fiber Distribut¬ 
ed Data Interface), FDDI-II, and BISDN 
(Broadband Integrated Services Digital 
Network). 

In addition to data delivery, we are im¬ 
plementing a complete conference man¬ 
agement entity providing the primitives 
outlined in Table 1. ■ 
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(D - Arizona) 
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J. McHugh, CLI & C. Martin, Duke Univ. 

“Security in Distributed Systems II” 

Mr. Morrie Gasser, DEC 

“Approaches to Database Security” 

Ms. Teresa Lunt, SRI 

“OSI Security” 

Mr. E. J. Humphreys, British Telecom 

“Risk Management” 

Mr. David Snow, ITT 


“Software Safety” 

Mr. John McHugh, CLI 


Wednesday - Friday, 

Technical Paper Sessions 

• Trusted System Development 
(architecture, design, formal methods 
auditing, user interface) 

• DoD Applications 

• Non-DoD Applications 

• Integrity 

• ISO Standards 

• Database Security (research, application) 

• Network Security 

• Security Engineering (risk assessment, life c 


Program 

5-7 December 1990 
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• Trusted System Development 

• Education & Ethics 

• Trusted Subject-based DBMS 

• Software Safety 

• Computer Crime 

• Certification of Professionals 

• Open System Security Standards 

• Computer Security in Government Labs 


Special Events 


Biosphere II: a prototype of the Earth for the future 
Sonora Desert Museum: living animals and plants of the Sonoran Desert Region 
Data Management Security & Privacy Task Group Workshop: "Database Security for Civilian Agencies” 

Additional Information 


For a copy of the advance program, which includes rates, schedule, registration form, and special events 
information, contact: 

Diana Akers, Publicity Chair, (703) 883-5907 akers%mitre.org 
Victoria Ashby, Publications Chair, (703) 883-6368 ashby%mitre.org 
The MITRE Corporation, 7525 Colshire Dr., McLean, VA 22102 

Copies of the Conference Proceedings and a videotape of the Distinguished Lecture will be available. 

Program Subject To Change 









Multiprocessor 

Performance- 

Measurement 

Instrumentation 


Alan Mink, Robert Carpenter, George Nacht, and John Roberts 
National Institute of Standards and Technology 


T he complexity of allocating and 
scheduling parallel resources 
makes it difficult for multiproces¬ 
sor users to achieve the performance po¬ 
tential of their machines. Multiprocessor 
users need convenient, affordable mea¬ 
surement systems to evaluate the perfor¬ 
mance of their algorithms and the support¬ 
ing architecture. 

To be usable, the measurement system 
must be part of the normal programming 
environment and must not interfere with 
system operations or other users. Measure¬ 
ment must be provided for the entire per¬ 
formance hierarchy, starting with the exe¬ 
cution time of the user’s program, including 
arbitrary parts of it, down through the op¬ 
erating system to the system architecture 
(hardware). This hierarchy stems from the 
user wanting to know how long something 
took and why it took that long. If the “why” 
can be determined, the next question is 
“How can it be improved?” 

For uniprocessors, measurements ob¬ 
tained completely by software are usually 
satisfactory. But multiprocessors have in¬ 
terdependent parallel execution threads, 


The hybrid 
measurement systems 
developed by NIST are 
implemented as VLSI 
chips. They introduce 
little perturbation and 
provide physically 
small and affordable 
performance- 
measurement support. 


and software measurement techniques per¬ 
turb the interaction of the cooperating pro¬ 
cessors. This can alter the program’s exe¬ 
cution characteristics because the 
measurement perturbation delays only the 


process in which it occurs, not the other 
processes. This generates synchronization 
skewing and communication delays be¬ 
tween various processes in the measured 
program that don’t occur in the non-mea- 
sured program. Although the amount of 
extra execution time due directly to mea¬ 
surement can be estimated for each pro¬ 
cess, the delays caused by the revised inter¬ 
action of these processes are far less 
predictable. Even more insidious is the 
possibility that the execution sequence/ 
order could change as a result of these 
nonuniform delays. Also, since software 
measurement tools do not have a “view” of 
the hardware, they cannot obtain detailed 
architectural performance measurements. 

Measurements that are completely im¬ 
plemented in hardware are nonperturbing 
and can obtain architectural performance 
measurements, but they are electrically 
complex and costly and do not have a 
“view” of the software structures they are 
measuring. Furthermore, for hardware 
systems to measure algorithm performance, 
access to virtual addresses is generally 
necessary, and this information is not 
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available “off-chip” in many new VLSI 
processors. 

A hybrid measurement system — that is, 
software with hardware support—appears 
to be an attractive compromise. A careful 
choice of support hardware greatly reduces 
measurement perturbation in multiprocessor 
systems at modest cost. An attractive goal 
for manufacturers would be to offer a 
measurement facility as an option, with 
essentially no cost to those purchasers who 
do not want it. 

We focus here on multiple-instruction, 
multiple-data (MIMD) multiprocessor 
systems, both loosely coupled and tightly 
coupled. For the paradigm of multiple 
processors solving a single problem faster, 
we present a taxonomy of hardware-sup- 
ported measurement approaches and cri¬ 
tique their application. We then describe a 
measurement tool designed and imple¬ 
mented by NIST that can provide affordable 
user-level measurement with little pertur¬ 
bation. 

Measurement 

approaches 

Measurement is accomplished in two 
operations, triggering and sampling. Trig¬ 
gering is the detection of a predefined event 
during program execution that causes 
(triggers) sampling of measurement data. 
Sampling is the collection and storage of a 
set of measurement data (a sample) de¬ 
scribing computer operation at and between 
events. The sample may be event trace data 
or resource utilization data. Event trace 
data describes the operation of the executing 
software, for example, program execution 
time, execution path, and response time. 
Resource utilization data describes hard¬ 
ware utilization, for example, cache hit 
ratios, memory access delays, and bus 
utilization. 

Measurement can be implemented in 
hardware, software/firmware, or by hybrid 
means. 1 The sampling techniques (there 
may be more than one) are independent of 
the trigger mechanism. 2 Software and hy¬ 
brid techniques use either interrupts or 
embedded code for triggering, while 
hardware methods passively monitor a set 
of signals, triggering on specific combina¬ 
tions of signals. Software and hybrid 
techniques are intrusive, since additional 
code is executed either in the measured 
program or the operating system. This af¬ 
fects the timing characteristics of the 
measured program. Hardware techniques 


are essentially nonintrusive, as they do 
not change the program’s operating char¬ 
acteristics. 

Measurement techniques that cause per¬ 
turbations in the timing characteristics of 
cooperating processes can alter the execu¬ 
tion and synchronization of these process¬ 
es — and thus their performance — in 
MIMD systems. While this is usually not 
the case in a uniprocessor environment, the 
problem can be very significant in a multi¬ 
processor environment. Extra instructions 
executed by a measurement tool, embed¬ 
ded in either the process or the operating 
system, increase both execution time and 
memory space and cause invalidations in 
translation look-aside buffers and caches, 
generating perturbations that include 
extra bus traffic and delays. If sampling 
is done by software, additional memory 
is required for storage of the measure¬ 
ment data. 

As a practical matter, nonperturbing event 
triggering (the basis of any hardware tech¬ 
nique) is costly and may fail to obtain 
unambiguous data (for example, virtual 
addresses) on the executing software. It 
appears that an affordable system must 
tolerate a minimal level of perturbation at 
each event. The perturbation that can be 
tolerated without significantly altering ex¬ 
ecution is program dependent. In general, 
the larger the granularity 3 of each of the 
cooperating processes, and the less fre¬ 
quently communication or synchroniza¬ 
tion occurs between them, the higher the 
tolerance. Our premise is that multiproces¬ 
sor performance measurement requires a 
hybrid technique that provides the ease and 
familiarity of software tools along with 
some level of hardware support to reduce 
perturbation to executing processes. 

Data sampling. Data sampling has an 
intrusive factor, either internal or external, 
and a locality factor, either distributed or 
centralized. In internal (on-machine) data 
storage, the sample is stored in the working 
memory of the machine being measured. 
Software data collection usually denotes 
internal data storage. In external (off-ma- 
chine) data storage, the sample is stored in 
memory external to the machine being 
measured. Frequently, dedicated data-col- 
lection hardware is used to support exter¬ 
nal data storage. Data storage can be dis¬ 
tributed among the processors or centralized 
in one location. Data collection is sensitive 
to the distance from the data source. 
Therefore, it should be distributed among 
the processors, although it may be central¬ 
ized in one location in certain cases (for 


example, tightly coupled, shared-memory, 
single-bus machines). 

Internal data storage. If a significant 
amount of software is used to collect a data 
sample, substantial perturbation occurs. 
These perturbations affect registers, cache, 
and memory management contents, as well 
as data path traffic. Storing these samples 
in the user’s working memory introduces 
additional perturbation, although it is small 
compared to the corresponding collection 
perturbation. We believe that this level of 
perturbation is unacceptable in most multi¬ 
processor machines and have not pursued 
it, even though it is an inexpensive approach. 

External data storage. Perturbation to 
the operation of the measured machine can 
be eliminated, or at least greatly reduced, 
by using external data storage coupled with 
supporting data-collection hardware, that 
is, a measurement node. Execution per¬ 
turbation is minimal if a single Write in¬ 
struction to a memory-mapped measure¬ 
ment node causes an entire sample to be 
collected and stored. This node would 
contain a time counter, so a sample would 
consist of the current time and the identi¬ 
fication of the writing processor, along 
with the user-written data. Other machine- 
state information could also be included. 
Under user control it should also be possible 
to start and stop sampling, as well as the 
time counter, and thereby ignore execution 
of user-selected and nonuser software. 

In a shared-memory architecture, a sin¬ 
gle, centralized measurement node can be 
the target of all the measurement Write 
instructions (Figure 1). Placing the address 
of the data measurement node in memory 
space (instead of I/O) usually results in 
less system perturbation because of more 
efficient transfer protocols. Further re¬ 
duction in perturbation can be achieved if 
the measurement node has a direct con¬ 
nection to the processor that bypasses the 
cache and the memory management unit 
(Figure 2). 

In loosely coupled systems (and in many 
switch-connected “tightly” coupled sys¬ 
tems), the capture of each measurement 
sample must be distributed throughout the 
system being measured to avoid serious 
perturbation of the machine’s data paths. 
This requires a measurement node for each 
processor that includes a synchronized time 
counter. Distributed external data collection 
can also reduce measurement perturbation 
in tightly coupled machines, since it avoids 
use of the computer’s shared data path. 
Measurement samples can be stored lo- 
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cal to each node in a distributed data cap¬ 
ture system. However, there are problems 
with this approach. If samples aren’t dis¬ 
tributed evenly throughout the MIMD sys¬ 
tem, insufficient sample storage could occur 
at some nodes. Sufficiently large sample 
storage at each node is expensive. In ad¬ 
dition, samples can’t be examined during 
normal system operation without causing 
significant perturbation. 

Distributed data capture with central¬ 
ized data storage eliminates the above 
problems. Each measurement node replaces 
its sample storage with an output interface 
that transmits the captured data to a central 
collector, as illustrated in Figure 3. Each 
node should contain a buffer to smooth out 
the peak rate of the collected samples. To 
avoid seriously perturbing the multipro¬ 
cessor’s interconnection network, a sepa¬ 
rate dedicated communication network 
should connect all of the distributed mea¬ 
surement nodes to the centralized data 
storage. Such a network can consist of a 
simple token ring, using only three control 
lines (token, reset, and clock) in addition to 
those for data. The measurement node, one 
for each processor, is not large, and it could 
be either an external application-specific 
integrated circuit or internal to a VLSI 
processor. Only one central data-storage 
system is required for a multiprocessor. 
Note, however, that there may be substantial 
traffic over the dedicated measurement 
network to the central storage facility. 

Event triggering. Triggering is the 
mechanism that recognizes a user-speci¬ 
fied event in an executing program and 
causes a measurement data sample to be 
taken. This can be accomplished in two 
ways: (1) by inserting extra instructions in 
the software (embedded code) to explicitly 
cause data capture or (2) by passive mon¬ 
itoring (pattern matching) of processor 
signal lines such as data and address lines. 
Interrupts can also be used as triggers, but 
they fall into either the embedded code or 
pattern matching categories. Software traps 
are the same as embedded code, but they 
are more perturbing due to the associated 
context switch. External interrupts can be 
detected by embedded code (in the operating 
system) or passive monitoring (of the in¬ 
terrupt signals), but they cannot be asso¬ 
ciated with arbitrary program events. Ex¬ 
ternal interrupts can be useful in capturing 
time-sequenced data, exception conditions, 
or other external events. 

Embedded-code triggering. Embedded 
code is an easy method of triggering, and 



Figure 1. Centralized, globally accessible measurement node. 



Figure 2. Measurement node connected to the CPU and by-passing the memory 
management unit (MMU) and cache. 



Figure 3. Measurement nodes with distributed data capture and centralized data 
storage. 
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its advantages are substantial. Child pro¬ 
cesses can easily identify themselves, as 
can processes sharing code; there is never 
false triggering from prefetched code; and 
it is relatively easy to identify processor- 
process associations. In tightly coupled 
systems, hardware support that reduces the 
perturbation of measurement can be ac¬ 
complished centrally at relatively low cost. 

In some situations, the perturbation from 
extra measurement instructions may not be 
tolerable. Instruction look-ahead queues, 
pipelined execution, caches, memory in¬ 
terleaving, and memory management 
translation look-aside buffer entries may 
be affected. Embedded code triggering 
should only be considered for measurement 
events separated by at least some tens of 
instructions in the same instruction stream. 

Pattern-matching triggering. Pattern¬ 
matching hardware can accomplish trig¬ 
gering without perturbation. It recognizes 
predetermined addresses or values, either 
instructions or data. This approach involves 
no embedded measurement code. Howev¬ 
er, its penalties are hardware complexity, 
high cost, and practical operational 
problems: 

• Desired signals may not be accessible, 
either because they are buried within a 
VLSI chip or because the circuitry is pro¬ 
prietary. For example, a program references 
in terms of virtual addresses, whereas an 
internal memory management unit provides 
only physical addresses outside a VLSI 
CPU chip. Thus, the relationship of virtual 
and physical addresses must be known, but 
physical addresses are assigned and reas¬ 
signed during execution. Even more in¬ 
sidious is an internal cache in which cache 
misses provide physical addresses, while 
cache hits provide no external indication. 

• Prefetched instructions or data may 
not in fact be used. Since only the fetch, not 
the use, can be detected externally, extra¬ 
neous triggers may be generated. 

• Multiple processes on the same pro¬ 
cessor may use the same virtual address or 
share the same physical address. Identifi¬ 
cation of the active process will be im¬ 
possible from triggers caused by these 
addresses. 

• Some kinds of events can only be iden¬ 
tified by a sequence of patterns. Sequence 
detection, when it is possible, may require 
a substantial increase in the size of the 
pattern storage memory and its control 
hardware. 

Some of the above problems could be 
eliminated by special measurement regis¬ 
ters containing address-translation and 


process data that are updated at context 
switches. This requires potentially per¬ 
turbing software support from deep within 
the operating system. Contents of these 
registers would be available to the mea¬ 
surement node and would be part of the 
data captured at events, thus creating a link 
between the software and the measurement 
hardware. 

In addition to the above problems, 
practical triggering via pattern matching 
requires programming environment assis¬ 
tance. The user should be allowed to insert 
measurement pseudoinstructions into 
source code. The system software, such as 
compilers, linkers, and loaders, would for¬ 
mulate and structure the corresponding 
trigger patterns. These patterns would 
then be downloaded to the measurement 
hardware. 

Implementation example. We have ex¬ 
perimented with triggering by pattern 
matching 4 on each CPU address bus. A 
dedicated unit is required for each CPU in 
a multiprocessor, irrespective of the ar¬ 
chitecture. This part of our hardware 
measurement tool, although designed in¬ 
dependently, is similar in concept to one 
designed by Gregoretti 5 but differs signif¬ 
icantly in its implementation. As a result of 
developing this tool, we have realized that 
the problems mentioned above limit its 
applicability and thus its ability to obtain a 
number of performance metrics. 

The pattern matcher constantly monitors 
selected hardware signals from the processor 
and compares them with a set of stored 
patterns. Any pattern match triggers a 
measurement sample. If desired, a trigger 
can signal data collection at all processors, 
thus providing a global snapshot of every 
processor’s activities. 

A long associative memory, at least 32 
bits wide with a “don’t care” mask per 
entry, is needed to implement the pattern 
matcher. This is not commercially available. 
Gregoretti 5 used a custom-designed asso¬ 
ciative memory in the implementation of 
his Observer module, but it was limited to 
only 16 patterns of 16 bits per pattern. Both 
Gregoretti’s approach and ours allow ar¬ 
bitrary “don’t cares” to exist in the patterns. 
Our experimental pattern matcher uses a 
direct memory lookup technique and a 
random-access memory. The input signal 
pattern is the RAM address and the content 
of each memory location is a match/no¬ 
match indicator. Specialized triggers and 
control signals can be generated for any 
desired matches by using a pattern matcher 
with a multibit output word. The possible 


pattern set is extremely large, numbering 
in the billions (at least 2 32 ), but for any 
given program, the potential pattern set is 
very small (hundreds) and can therefore be 
recoded into a smaller state space using 
commercially available RAMs. This map¬ 
ping between the original pattern set and 
the reduced, recoded pattern set can be 
accomplished in parallel on disjoint pieces 
of the trigger pattern. This is similar to the 
decomposition of a single-stage combina¬ 
torial logic sum-of-products expression into 
a multistage sum-of-products expression. 
Our implementation can match a minimum 
of 128 and a maximum of 2,048 patterns of 
32 bits each. The actual number depends 
on the distribution of patterns in the pattern 
state space. 

Event trace-measurement sampling. 

Event trace measurement requires mea¬ 
suring and storing the time at which vari¬ 
ous events occur. Execution duration is the 
time difference between two events that 
mark the start and end of the program part 
being measured. The data acquired for each 
event should identify the event, CPU, 
process, and time (time stamp). Addition¬ 
ally, the ability to include arbitrary user- 
specified data is desirable. 

The acquisition and storage of event 
data may cause all the forms of perturba¬ 
tion mentioned above for embedded-code 
triggering. Support hardware can reduce 
the perturbation and assist in the collection 
and storage of this data. System architec¬ 
ture and measurement accuracy determine 
whether this support hardware should be 
centralized or distributed. 

Time counters. Traditionally, time stamps 
are obtained by an operating system call 
(which often involves a context switch) 
and require execution of hundreds or 
thousands of extra instructions. This se¬ 
quence greatly disturbs machine state, is of 
uncertain duration, and usually returns time 
stamps of multi-millisecond uncertainty. 
Furthermore, this delay generally occurs 
on only one processor while it allows the 
others to proceed, thereby seriously per¬ 
turbing interprocessor relationships in a 
multiprocessor. At a minimum, precise time 
on MIMD machines requires substitution 
of the operating system call by a simple 
read instruction to a fine-resolution time 
counter accessible from each processor. 
The counter precision should be about the 
same as an instruction execution time. A 
similar time facility is available for Cray 
X-MP and Y-MP supercomputers and Se¬ 
quent Balance and Symmetry multipro- 
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Figure 4. Centralized, globally accessible time counter. 



Figure 5. Distributed time counters, synchronized by a common time base and 
reset signal. 


cessors. This level of hardware support 
only eliminates perturbation caused by the 
call to the operating system. It has no effect 
on the perturbation caused by acquisition 
and storage of the rest of the sample data. 

The time counter in a shared-memory 
architecture may be a single, globally ac¬ 
cessible register, as illustrated in Figure 4. 
Anything less than very tight coupling re¬ 
duces the utility of a single, central time 
counter. The extra communication delay to 
read a central register in switch-connected 
machines such as the Butterfly and RP3 
may be excessive. The long communication 
delays of loosely coupled systems require 
distributing a time counter at each processor. 
All distributed counters in a system should 
be synchronized, which requires a time 
base and a reset signal from a common 
point, as illustrated in Figure 5. Tightly 
coupled systems can also benefit from 
distributed time counters at each pro¬ 
cessor, since reading a time register 
would no longer perturb the shared mem¬ 
ory data path. 

Global interrupts. Event triggering 
captures the state of only the processor on 
which the event occurred; a global interrupt 
can be used to obtain a global snapshot of 
the multiprocessor. A global interrupt al¬ 
lows one processor to interrupt all proces¬ 
sors, as well as allowing all processors to 
synchronize their returns from that interrupt. 
Since execution simultaneously stops at all 
processors and then, when all are ready, 
simultaneously starts again, distortion to 
interprocessor timing is limited. When ser¬ 
vicing the global interrupt, the time-stamp 
counters could be stopped to omit this 
measurement phase automatically. This 
maintains interprocessor timing relation¬ 
ships, provided no external real-time con¬ 
straints exist. An interrupt service routine 
handles each specific global interrupt 
function. 

Resource utilization sampling. Identi¬ 
fying system bottlenecks requires measuring 
the utilization or loading of many of the 
architectural resources and correlating these 
with associated intervals between program 
events. This can be accomplished by 
“preprocessing” hardware; otherwise, data 
would have to be captured for each system 
microcycle, which is clearly impractical. 
The predominant function of this prepro¬ 
cessing hardware is to tally key low-level 
hardware activity. Access to these hardware 
signals is necessary and can become quite 
complex. The complexity arises when no 
unique hardware signal identifies an event 


so that external dedicated logic must trans¬ 
form a number of existing signals into the 
desired output. Further complications oc¬ 
cur when the existing signals occur at 
different times, therefore requiring se¬ 
quential logic. 

We have identified a number of useful 
counters: scalar, peak value, ratio, and 
histogram. Resource utilization data need 
not be reported at every event trigger; trig¬ 
gers must indicate whether or not resource 
utilization data should be sampled. This 
alleviates data storage and transfer re¬ 
quirements. When an event trigger occurs 
that requires resource utilization data, the 
contents of the counters are stored and then 


optionally reset. Independent measurements 
with maximum precision can be obtained 
on different parts of the executing program 
by resetting these counters after sampling. 
A number of counters would be required to 
measure all of the items of interest in a 
system. Since resource measurement hard¬ 
ware is generally nonperturbing, it can, in 
many cases, be reconnected differently in 
repeated passes to measure various aspects 
of the architecture. For user convenience, 
counters could be connected to a number of 
resources, and a user program could select 
a subset from them. Counters of perhaps 32 
bits will assure a reasonable interval be¬ 
fore overflow. 
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Figure 6. The Trace Measurement System (Trams) measurement tool on a tightly 
coupled multiple-instruction multiple-data architecture. 



Scalar counter. A scalar counter is a 
single counter that tallies the number of 
occurrences of some hardware signal. For 
example, a time-stamp counter accumu¬ 
lates the number of clock pulses that have 
occurred. 

Ratio counter. Often, average values or 
ratios taken over short sections of a test 


program are satisfactory. Examples include 
cache hit ratio (successful cache accesses 
divided by all cache accesses) and bus 
utilization or duty cycle (busy bus cycles 
divided by all bus cycles). Since the ratio is 
never exactly known before an experiment, 
the two counters should be of the same 
size. Real-time calculation of a ratio, on 
the fly, seems to be too expensive. As a 


compromise, a ratio can be obtained by 
collecting both the numerator and denom¬ 
inator counts and later doing the division 
during analysis. Thus, a ratio counter is a 
pair of counters that accumulate related 
hardware events. 

Capturing a large quantity of data at 64 
bits per pair would require a great deal of 
sample memory. Much of this memory, 
demanded by the measurement precision, 
is essentially wasted, since experimental 
tolerances in complex systems are rather 
loose. There are many unquantifiable per¬ 
turbations. This justifies compressing the 
ratio counter data via a reduced-precision 
or floating-point format. 

Maximum pulse duration. The widest 
pulse in a train of pulses (bus access delay, 
etc.) can be captured with a single counter 
and a holding register. Both are initially set 
to zero. At the end of each pulse, the con¬ 
tents of the counter are transferred to the 
holding register only if they are larger than 
the current contents of the holding register. 
The counter is again set to zero. The holding 
register is read, and optionally reset, at 
appropriate triggers. 

Histogram counter. Capturing the dis¬ 
tribution of individual hardware events in 
“buckets” (ranges of values) may be much 
more useful than the preprocessed data 
provided by ratio or maximum-duration 
counters. Distribution capture may be ac¬ 
complished by providing a set of incre- 
mentable registers, one for each range of 
values. Examples of this type of measure¬ 
ment are program execution profiles (a 
distribution of the time spent in each 
section of a program) 6 ' 7 and memory ac¬ 
tivity profiles (a distribution of the num¬ 
ber of memory accesses to each region of 
memory). 

Histogram data, considerably more de¬ 
tailed than ratio or peak data, increases 
storage and transfer requirements corre¬ 
spondingly. Compressing the data into a 
reduced-precision format helps. Nonethe¬ 
less, collecting data from a number of bucket 
registers, is time consuming sequentially 
and expensive in parallel. 

Practical 

implementations 

Our experimental work is represented 
by two measurement systems: one hybrid 
and one completely in hardware. Our hy¬ 
brid system, the early Trace Measurement 
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Figure 8. Block diagram of a measurement node. 


System (Trams), 8 - 9 is illustrated in Figure 
6. It is a memory-mapped device using 
software triggering and hardware sampling 
of time and processor identification. Users 
embed triggering Write instructions (to the 
Trams address) in their code. Data written 
to Trams is user specified; it normally 
identifies the writing process and an event 
in the process. Trams stores this data, a 
time stamp and the identity of the CPU, as 
a sample in its own sample memory. These 
samples are then read from the sample 
memory, usually after the experiment, for 
performance analysis. We have imple¬ 
mented two variations of this hybrid sys¬ 
tem; one is for a 16-processor, tightly 
coupled, shared-memory multiprocessor 
using a single centralized measurement 
node; the other is for a 16-processor, loosely 
coupled, distributed-memory multiproces¬ 
sor with separate measurement nodes for 
each processor. 

Figure 7 shows our experimental hard¬ 
ware system 4 - 10 in which both the trigger 
and Rems (Resource Measurement System) 
sampling mechanism are implemented in 
hardware. The trigger mechanism is a 
nonintrusive pattern matcher that watches 
processor signal lines such as virtual ad¬ 
dresses. A pattern-matching trigger device 
is required for each processor. When the 
pattern matcher detects one of a set of user- 
specified patterns, it causes a trigger. When 
a trigger occurs, the timed event trace data 
(a time stamp and the virtual address rep¬ 
resenting the event), and the resource uti¬ 
lization data (the Rems counter contents) 
are captured and stored in a local sample 
memory. This data is then read out of the 
dual-ported sample memory, either during 
or after an experiment, by an external 
processor for analysis. 

Our experiments with nonintrusive pat¬ 
tern matching showed its lack of general 
applicability due to cost, signal accessibility, 
and the inability to distinguish externally 
between different processes. We conclud¬ 
ed that a hybrid technique, such as the 
Trams, does a good job of acquiring timed 
event samples (software performance) and 
the Rems does a good job of acquiring 
additional resource utilization samples 
(architectural performance). Although the 
Trams software trigger mechanism intro¬ 
duces a level of perturbation, it is tolerable 
provided events are separated by some tens 
of machine instructions. Our first Trams 
implementations were single circuit boards, 
which were too large and costly to replicate 
for microprocessor-based multiprocessors. 
We have thus designed a VLSI chip set that 
integrates the Trams functions of software 


triggering and hardware sampling with the 
hardware Rems counters. This combina¬ 
tion supports the correlation of the soft¬ 
ware and architectural performance. The 
result consists of two integrated circuits, 
the pTrams and the pRems. 

Hybrid VLSI 
measurement tool 

A single measurement node, configured 
from the VLSI chip set, can be used for 
centralized data collection in a tightly cou¬ 
pled system, or the same VLSI chip types 
can be used in measurement nodes associ¬ 
ated with each processor in a loosely cou¬ 
pled multicomputer. A single measurement 
node contains one pTrams and any number 
of pRems chips, as shown in Figure 8. Both 
the pTrams and pRems VLSI chips contain 
three largely independent sections: 

(1) Data capture, which takes measure¬ 
ment samples when activated by a 
memory-write trigger from the pro¬ 
gram being measured. Data capture 
in the pRems chip is controlled by 
the pTrams chip. 

(2) Output, which places samples on a 
dedicated collection network or 


which can be read by a local proces¬ 
sor or direct-memory-access con¬ 
troller. (See “Output section” and 
Figures 14 and 15 for details.) 

(3) FIFO, which buffers bursty samples 
for transmission by the output sec- 

Linear scan test facilities have been in¬ 
corporated into the design of both the 
pTrams and pRems. In the linear scan mode, 
points on major data paths are organized as 
one long shift register so that test informa¬ 
tion can be shifted in or out. 

In a loosely coupled system, each pro¬ 
cessor requires a measurement node. A 
single node located on the shared bus is 
sufficient in a tightly coupled system, al¬ 
though one node per processor would re¬ 
sult in less perturbation (to the data paths, 
etc.). A clustered system needs at least one 
node within each tightly coupled cluster or 
as many as one for each processor. 

pTrams data-capture section. The 

pTrams is intended to operate with a num¬ 
ber of different processor interface proto¬ 
cols (80x86, 680x0, 32x32, etc.). Only a 
few external bus-interface components are 
needed for partial address decoding and 
signal selection, as can be seen from Figure 
8. This address recognition can be imple- 
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merited in a single programmable logic 
device. The pTrams is mapped into a num¬ 
ber of contiguous locations in the memory 
(or I/O) space of the measured processor 
(see sidebar, below, on register formats 
and memory-mapped addresses). Separate 
addresses are allocated to the control reg¬ 
ister, to the status register, to trigger a 
pTrams sample, to trigger both a pTrams and 
a pRems sample, and so on. 

The pTrams data capture section of Fig¬ 
ure 9 provides two modes of data capture, 
trace and raw modes (Figure 10). Mode 
selection is implicit in the trigger address 
and requires no additional overhead. Trace 
triggering causes capture of a data sample 
consisting of the least significant 16 bits of 
written data, a processor identification, a 
36-bit time stamp, and a sample-type ID 
(64 bits in all). The sample-type ID distin¬ 
guishes among trace samples, raw sam¬ 
ples, and pRems samples. 


. 


Figure 9. Data capture section of the 
Trace Measurement System IC 
(pTrams). 


Register formats and memory-mapped addresses 


The measurement node is mapped into a block of 256 ad¬ 
dresses, thus eight address bits are used to specify intended 
actions. These bits are formatted as follows: 


2 bits 

1 bit 

5 bits 

pRems 

pRems 

Encoded 

selective 

trigger 

pTrams 

resets 


commands 


The pRems selective reset selectively clears any of the 
pRems ratio counters after a sample (if any) is taken. The 
pRems trigger causes every pRems attached to this pTrams 
chip to take a sample, if the pTrams successfully takes a 
sample. The pTrams cannot take a sample if it is not in sam¬ 
pling mode, its FIFO is full, or if the filter level of the sample 
is below the threshold level, etc. 

The 16-bit configuration register format is 


8 bits 3 bits 3 bits 


2 bits 


CPU User mode Supervisor 

identifier filter mode filter 

threshold threshold 


Encoded 
number of 
wait states 


The 16-bit status and control register format 


Control register (write) 

Set interrupt request 
Assert global interrupt 

Enable global interrupt 

Enable Sampling 
Set raw sampling priority 
Read only, writes ignored 
Read only, writes ignored 
Read only, writes ignored 
Clear interrupt request 
Clear global interrupt 
Disable global 
interrupt response 
Disable sampling 
Clear raw sampling priority 
Read only, writes ignored 
Read only, writes ignored 
Read only, writes ignored 


Bit Status register (read) 

15 Interrupt request 
14 Global interrupt locally 
asserted 

13 Global interrupt 
response enabled 
12 Sampling enabled 
11 Raw sampling has priority 
10 pTrams FIFO free 

9 pRems FIFO free 

8 pTrams FIFO overrun 

7 Logical zero on read 

6 Logical zero on read 

5 Logical zero on read 

4 Logical zero on read 

3 Logical zero on read 

2 Global interrupt sense 

1 Dynamic (vs. static) CPU ID 

0 32-bit (vs. 16-bit) mode 
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(a) 



Figure 10. Format of measurement samples: (a) 64-bit format of pTrams trace 
sample; (b) 64-bit format of pTrams raw sample; (c) 32-bit pRems format (con¬ 
catenated for multiple ratio counters). 


In the raw mode, the user writes up to 48 
bits (either two or three writes) to the 
pTrams via appropriate addresses. The re¬ 
maining, automatically inserted 16 bits are 
allocated to sample-type ID and processor 
identification. The pTrams can be config¬ 
ured for either 16- or 32-bit data transfers. 
Raw mode allows the user to capture soft¬ 
ware-collected data, which will generally 
qualify the preceding event. For example, 
in a message-passing environment, the trace 
mode sample “process 23 sending a mes¬ 
sage at <time>” may require additional 
information such as source node, destina¬ 
tion node, message size, and message iden¬ 
tification. Since the 16-bit user field of a 
trace sample is not large enough to include 
all this, the trace sample could be followed 
by a raw sample to qualify the event. 

Both modes of data capture provide a 
sample filtering capability. Associated with 
a trigger is both a data capture mode and a 
filter level, the data capture mode being 
either trace or raw. If the trigger filter level 
(see sidebar) is below a user-specified 
threshold, the data is not captured and is 
thus filtered out. This filtering is useful 
since it allows both the operating system 
and the user code to be extensively instru¬ 
mented, and the desired set of measure¬ 
ments can be selected at execution time by 


choosing the appropriate filter threshold 
level. No code changes are required be¬ 
tween related measurement experiments, 
and no overhead conditional statements 
are needed to skip unwanted measurements. 
This yields consistent results. There are 


eight separate filter levels for the user and 
eight for the operating system. The thresh¬ 
olds for both are specified by the user 
during initialization. The memory-mapped 
write address used to trigger a sample 
specifies both the data capture mode and 


> The encoded pTrams commands are as follows: 

Octal Command 

00 Reset pTrams 

01 Status and control register 

02 Configuration register 

03 N/A 

04 Time stamp (all 32 bits or low-order 16 bits, for 
16-bit mode) 

05 Time stamp (high-order 16 bits, for 16-bit mode) 
06 N/A 

07 N/A 

10 Raw trace data (bits 16-31, for 16-bit mode) 

11 Raw trace data (bits 32-47) 

12 N/A 

13 N/A 

14 N/A 

15 N/A 

16 N/A 

17 N/A 

20 Time trace data at threshold level 0 

21 Time trace data at threshold level 1 

22 Time trace data at threshold level 2 

23 Time trace data at threshold level 3 


Octal Command 


24 

25 

26 
27 

30 

31 

32 

33 

34 

35 

36 

37 


Time trace data at threshold level 4 
Time trace data at threshold level 5 
Time trace data at threshold level 6 
Time trace data at threshold level 7 

0-15/0-31 in 16-bit/32-bit 


Raw trace data (bits 
at threshold level 0 
Raw trace data (bits 
at threshold level 1 
Raw trace data (bits 
at threshold level 2 
Raw trace data (bits 
at threshold level 3 
Raw trace data (bits 
at threshold level 4 
Raw trace data (bits 
at threshold level 5 
Raw trace data (bits 
at threshold level 6 
Raw trace data (bits 
at threshold level 7 


0-15/0-31 in 16-bit/32-bit 
0-15/0-31 in 16-bit/32-bit 
0-15/0-31 in 16-bit/32-bit 
0-15/0-31 in 16-bit/32-bit 
0-15/0-31 in 16-bit/32-bit 
0-15/0-31 in 16-bit/32-bit 
0-15/0-31 in 16-bit/32-bit 


mode) 

mode) 

mode) 

mode) 

mode) 

mode) 

mode) 

mode) 
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Figure 12. pRems ratio counter. 


the filter level. For example, address 
xxxx23 (octal) specifies trace capture 
(mode 2) and filter level 3. Thus, each 
capture mode has a block of addresses that 
specifies a filter level. 

The pTrams chip contains a 36-bit time- 
stamp counter whose value is included in 
each trace sample to indicate relative time. 
All time-stamp counters are synchronized 
via two common signals, which are gener¬ 
ated at some central location and distribut¬ 
ed to each chip. The time-base clock, pres¬ 
ently 10 megahertz, causes all the 


time-stamp counters to advance at the same 
rate and allows 100-nanosecond time res¬ 
olution. The reset signal simultaneously 
sets the time-stamp counters to zero in all 
the pTrams chips. These signals do not 
affect any signals of the processor being 
measured, although they have similar 
names. 

Processor identification can be obtained 
in either of two ways, external pins or an 
internal register. When the pTrams is as¬ 
sociated with a single processor, the pro¬ 
cessor identification is written into a regis¬ 


ter of the pTrams during initialization. The 
content of this register is then used each 
time a sample is captured. In a centralized 
configuration, when the pTrams is at¬ 
tached to a common bus of multiple pro¬ 
cessors, the processor identification is dy¬ 
namic and must be supplied as an input to 
the chip at the same time as the trigger data. 
This information must be available on the 
bus, or external logic must compute it. 

A wired-or global interrupt is provided 
by pTrams. 9 The local processor for any 
pTrams chip can cause this line to be as¬ 
serted, causing an interrupt at all other 
pTrams/processors that accept this interrupt. 
Once accepted, each pTrams also asserts 
this interrupt. The processor associated with 
each pTrams can sense the state of the 
global interrupt line. After performing the 
assigned interrupt task, each processor 
commands its pTrams to de-assert the glo¬ 
bal interrupt line, but does not resume 
normal processing until all other nodes 
have released the global interrupt line. 

Processor interaction with the pTrams is 
accomplished via a configuration register 
and a control and status register (see side- 
bar). The configuration register contains 
the static CPU identification (if it is dynamic, 
it is obtained externally with each sample), 
the sample filter threshold levels (for user 
and supervisor modes), and the minimum 
number of wait states to use when re¬ 
sponding to the processor. The control and 
status register contains information on the 
global interrupt, sampling, and FIFO. 

pRems data-capture section. We have 
determined that ratios and short-term av¬ 
erages are an important class of resource 
utilization measurement. Thus, the pRems 
chip contains two ratio counter pairs and 
requires an input signal for each counter of 
each pair. The set of processor signals we 
want to measure may exceed the number of 
pRems counters, so external gates to con¬ 
veniently select the desired signals from 
the set may be useful. In some cases it may 
be necessary to provide additional logic 
(either combinational or sequential) to create 
the desired signals for the pRems counters 
from a number of other available signals 
(Figure 11). 

The pRems data-capture section collects 
data from resource utilization counters. 
When the user triggers an optional pRems 
sample, the contents of the pRems counters 
are loaded into the FIFO in a reduced- 
precision form. Any of the ratio counter 
pairs may be reset after reading to improve 
the precision of subsequent readings. 

Since the numerator and denominator 
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Figure 13. pTrams and |iRems network section. 



Figure 14. Measurement nodes organized with a central data-collection node via 
a dedicated token-ring network. 


data is placed in the FIFO. If the input rank 


are related, a reduced-precision format can 
be achieved by representing the numerator 
and denominator counts as two truncated 
mantissas with a common exponent (Fig¬ 
ure 12). The total number of bits required 
to represent this pair depends on the ac¬ 
curacy required of the ratio. If a maximum 
error of 6.0 percent of full scale is accept¬ 
able, a 64-bit ratio counter can be truncated 
to a total of 15 bits (5-bit numerator, 5-bit 
denominator, and 5-bit exponent). A max¬ 
imum error of 0.03 percent of full scale can 
be achieved by truncating a 64-bit ratio 
counter to a total of 31 bits (13-bit nu¬ 
merator, 13-bit denominator, and 5-bit 
exponent). The pRems can be configured 
for either of these representations. 

Our ratio counters are designed to repre¬ 
sent this truncated mantissa format direct¬ 
ly. The numerator and denominator counters 
are structured such that the radix point is 
floating. As a result, the least significant 
bit of the count is not in a fixed position of 
the counter, while the most significant bits 
of the count are fixed in the most signifi¬ 
cant bits of the counter. To increment the 
numerator or denominator counters, a one 
has to be added to the least significant bit of 
the count. The function of the increment 
register is to indicate the current position 
of that least significant bit, which is com¬ 
mon to both the numerator and denominator. 
When a numerator or denominator carry¬ 
out occurs, the exponent counter is incre¬ 
mented and the contents of the other counters 
and the increment register are shifted to the 
right, thus making room for the new most 
significant bit. The purpose of this design 
was to make the readout of the counters, in 
our reduced-precision format, easy and 
quick. The result is that the n truncated bits 
of each counter are always in the n most 
significant bits of that counter, and no 
further manipulation of the data is required. 

FIFO. Sample generation is nonperiod¬ 
ic and bursty. The collection network can 
only accept samples at some maximum 
rate (limited by its bandwidth and the ac¬ 
tivity of other pTrams nodes), which is less 
than the maximum generation rate. A FIFO 
memory is placed between the data capture 
(input) and output sections of both the 
pTrams and pRems to smooth out peaks in 
the data collection rate. This is a synchro¬ 
nous, fall-through FIFO. The pTrams FIFO 
is 65 bits wide: 64 of pTrams data and a 
65th bit (pRems flag) indicating an asso¬ 
ciated pRems data sample. The pRems FIFO 
is 64 bits wide, containing the reduced 
precision value of two ratio counters. When 
a trigger causes a sample to be taken, the 


of the FIFO is full, the sample is discarded 
and an overrun flag is set. 

Output section. The output section 
(Figure 13) has two modes of operation. In 
the network mode, a dedicated token¬ 
ring network connects a group of mea¬ 
surement nodes to a central collection 


node (Figure 14). The non-network mode 
can be used for testing and for a local RAM 
(Figure 15). 

The ring network uses a simple token- 
arbitrated protocol with a single master 
(the collection node) as the destination for 
all data on the ring. Until a pTrams re¬ 
ceives the token, it regenerates the network 
input data and passes it on to its output. 
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Figure 15. Measurement node organized with a local memory and directed by a 
local controller. 


When a (iTrams node with data to send 
receives the token, it places one sample of 
its data on the network and then passes the 
token. If the pTrams node has no data to 
send, it immediately passes on the token. If 
the accompanying (iRems has associated 
data to send, as indicated by the pRems flag 
bit (the 65th bit of the pTrams sample data), 
then the pTrams passes the token to the 
pRems. The pRems places its data on the 
network and passes the token back to the 
pTrams, which then passes the token on to 
the next pTrams node in the network. 
Multiple pRems chips can be associated 
with a single pTrams, in which case the 
token is passed from the pTrams through 
each pRems in a daisy-chained fashion back 
to the pTrams. The collection node is the 
only originator of tokens and will detect 
the loss of a token by a time-out mecha¬ 
nism. 

Since network bandwidth is a concern, 
the network data path is designed for byte- 
serial rather than bit-serial operation. This 
requires eight data lines instead of one. 
Internal control logic sequentially selects 
each byte for output. In addition to the data 
lines, three control lines are needed: a to¬ 
ken signal, a synchronizing clock signal, 
and a reset signal. Thus, a total of 11 signal 
lines are required to implement this net¬ 
work. The resulting network bandwidth is 
80 megabits of measurement data per sec¬ 
ond. 

In the non-network mode an external 


data controller directs the operation of the 
output section. When the output of the 
FIFO indicates that data is present, the 
controller sequentially selects each data 
byte of the sample for output and finally 
notifies the FIFO that the sample has been 
used. 


O ur premise is that, to take full 
advantage of the power of their 
machines, multiprocessor com¬ 
puter users need better performance mea¬ 
surement than is available on uniproces¬ 
sors. The parallel-execution characteristics 
of multiprocessors demand some level of 
hardware measurement support to reduce 
the perturbation from measurement to a 
tolerable level and to obtain architectural 
(hardware) performance along with appli¬ 
cation (software) performance. A hybrid 
performance-measurement system for 
MIMD multiprocessors, using software 
(embedded code) triggers and hardware 
sampling, introduces a minimal amount of 
perturbation to the executing program. This 
perturbation can be as small as a single 
memory-write instruction per measurement 
sample. 

Our design uses two VLSI chips, but 
may need a couple of small programmable 
logic devices to interface to a multiproces¬ 
sor. Manufacturers could assist by includ¬ 
ing some of the measurement facilities 
discussed here in their designs or by mak¬ 


ing relevant signals conveniently available 
to allow field addition of measurement 
facilities. Our generic interface design 
provides for a wide range of applicability 
among many different MIMD multipro¬ 
cessors. The small size of this measure¬ 
ment hardware makes it attractive to incor¬ 
porate on processor boards; it will have 
very little impact on cabinet space and 
power. These CMOS chips are designed to 
be sufficiently fast for use with current 
processor chips of similar VLSI feature 
size — that is, contemporary non-super¬ 
computer multiprocessors. Our objective 
is to provide a useful measurement system 
at a reasonable cost and size. Since this 
design is in the public domain, the costs to 
commercialize it should be quite low. ■ 
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1 SPECIAL REPORT 


Gigabit Network Testbeds 


T he National Science Foundation and the Defense Advanced 
Research Projects Agency announced June 8 they were 
awarding $15.8 million to the nonprofit Corporation for 
National Research Initiatives to investigate gigabit network com¬ 
munications. Five testbeds around the country will examine gigabit 
applications and network technologies. The following summaries 
were prepared by the testbeds. 


The Aurora Testbed 


Aurora is an experimental wide area 
network testbed whose main objective is to 
explore and evaluate technologies for Phase 
3 of the proposed gigabit National Re¬ 
search and Education Network. Aurora’s 
principle research participants are Bell 
Communications Research (Bellcore), 
IBM Research, the Massachusetts Institute 
of Technology, and the University of 
Pennsylvania. Bell Atlantic, MCI, and 
NYNEX will cooperate in the research. 

Aurora will explore alternative network 
technologies, investigate distributed sys¬ 
tem/network service paradigms, and ex¬ 
periment with gigabit network applications. 
The gigabit network will link four sites: 
Bellcore’s Morristown Research and 
Engineering Laboratory in New Jersey; 
IBM Research’s Computer Science Labo¬ 
ratory in Hawthorne, New York; MIT’s 
Laboratory for Computer Science in Cam¬ 
bridge, Massachusetts; and the University 
of Pennsylvania’s Distributed Systems 
Laboratory in Philadelphia. 

Several approaches based on different 
switching and management paradigms have 
been proposed to achieve the next genera¬ 
tion of network. The telecommunications 
industry currently proposes asynchronous 
transfer mode (ATM), based on small, fixed- 
size data elements, for the next generation 


of network switching technology. Alterna¬ 
tive approaches based on other switching 
concepts are likely to coexist in the coming 
national network. 

Aurora will comprise several major re¬ 
search axes, each exploring a major topic 
as well as contrasting two or more alterna¬ 
tive approaches to solutions. The testbed 
intends to explore two significant network 
architecture options and how they work 
together, to gain hands-on experience with 
both options, and to determine how useful 
they are. Aurora will also address such 
network issues as communications archi¬ 
tecture and application service models. 

A key objective of the testbed is to pro¬ 
vide a platform from which other research¬ 
ers can explore business and scientific as¬ 
pects of such networks, as well as to evolve 
the network architecture to meet the needs 
of these new applications. This testbed 
should stimulate the development of appli¬ 
cations suited to such technologies and 
provide feedback for the evolution of the 
nation’s telecommunications infrastructure, 
including standards efforts, carrier direc¬ 
tion, and network vendors. 

Aurora is not intended as an applications 
testbed. Rather, it will explore options for 
providing the necessary network service 
and will use applications only as a way to 
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understand these technologies. The test¬ 
bed will explore teleconferencing, real¬ 
time multiservice applications, and the 
presentation of multimedia information 
in future business and residential environ¬ 
ments. Project members also intend to en¬ 
courage selected members of the research 
community at the participating sites to use 
the testbed. 

Within the testbed, MIT will explore 
new paradigms for network resource con¬ 
trol and allocation, including the design of 
critical algorithms and hardware compo¬ 
nents. The University of Pennsylvania will 
explore distributed system paradigms, par¬ 
ticularly distributed virtual memory. The 
University of Pennsylvania will examine 
appropriate software and architectural ap¬ 
proaches for network operation and man¬ 
agement. 

Also, Bellcore will collaborate with other 
testbed participants on high-speed proto¬ 
cols, network architectures, and broadband 
network applications and will supply pro¬ 
totypes of ATM-based switching and 
transmission systems. IBM will provide a 
prototype of their Paris gigabit network 
architecture and switching system and 
will experiment with on-line collaboration 
in the business and scientific application 
areas. 
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The Blanca Testbed 


The goals of the Blanca network re¬ 
search program are to develop technolo¬ 
gies supporting gigabit/second networks, 
to develop programming tools supporting 
advanced network-based applications, and 
to explore the relationships between net¬ 
work technology paradigms and applica¬ 
tion requirements. 

Blanca builds on the Experimental Uni¬ 
versity Network (XUNet) program for joint 
research on high-speed, wide area networks, 
jointly sponsored and directed by AT&T, 
Ameritech, Bell Atlantic, and Pacific Tele- 
sis. While the network researchers develop 
components for high-speed host-to-host 
communication and methods to control and 
use testbed components efficiently, appli¬ 
cations scientists will evaluate the new 
methods by comparing network perfor¬ 
mance for various applications. User re¬ 
quirements thus provide a framework for 
solutions to network design problems. 

Blanca has developed from an ongoing 
collaboration. Since 1986, the XUNet pro¬ 
gram has fostered research and collabora¬ 
tion with the University of California at 
Berkeley, the University of Illinois at Ur- 
bana-Champaign, and the University of 
Wisconsin at Madison. The first testbed. 


XUNet I, provided wide-area data commu¬ 
nications at 1.5 Mbits/sec. In 1991, XUN et 
II will employ 600-Mbits/sec switches. 

XUNet II will link AT&T Bell Labora¬ 
tories in Murray Hill, New Jersey; the 
National Center for Supercomputer Appli¬ 
cations (NCSA); the Computer Science 
Department at the University of California 
at Berkeley; the Computer Science Depart¬ 
ment at the University of Illinois at Urba- 
na-Champaign; and the Computer Science 
Department and Space Science and Engi¬ 
neering Center at the University of Wis¬ 
consin at Madison. 

Cray Research will connect to the Uni¬ 
versity of Wisconsin’s XUNet switch via a 
565-Mbit/sec circuit provided by Norlight 
Corporation. Supercomputers for applica¬ 
tions experiments will be provided by Cray, 
NCSA, and Astronautics Corporation. 

The research program will include work 
on switch control and design (in Illinois 
and Wisconsin), fast call setup (Wiscon¬ 
sin), development of traffic models (Ber¬ 
keley), multiplexing strategies for differ¬ 
ent traffic types (Berkeley), burst handling 
and congestion control (Berkeley and Wis¬ 
consin), real-time communication (Berke¬ 
ley), high-speed channel interfaces for su¬ 


percomputers (Wisconsin), and network 
virtual memory (Illinois). 

The applications research will be con¬ 
ducted at the University of Wisconsin’s 
Space Science and Engineering Center, at 
NCSA, and at the Lawrence Berkeley Labs. 
Specific applications will demonstrate 
network capabilities and their effect on the 
productivity of scientists and on the net¬ 
work architecture itself. Applications to be 
studied include multiple remote visualiza¬ 
tion and control of simulations (Wisconsin 
and NCSA), radio astronomy imaging 
(NCSA and UC Berkeley), multimedia 
digital library (NCSA), and medical imaging 
(Lawrence Berkeley). 

As lower-layer methods such as queu¬ 
ing, switching, or transport protocols are 
modified, the effect on user applications 
will be directly observed. In the same way, 
as the user applications and transmission 
control methods are modified, the effect on 
the underlying network will be directly 
observed. The use of actual applications on 
the network will support a working dialog 
between users and researchers, resulting in 
network applications that are more effi¬ 
cient and in networks that better support 
application and user requirements. 


The Casa Testbed 


The Casa testbed intends to demonstrate 
that distributed supercomputing using wide 
area high-speed networks can provide new 
levels of computational resources for lead¬ 
ing-edge scientific problems. Distributing 
large computations among several super¬ 
computers provides greater computing 
power than is available on any single ma¬ 
chine and the ability to use the most suit¬ 
able machine for each step of the task. 

Casa’s main challenge is to use multiple 
supercomputers connected by high-band¬ 
width channels to solve three important 
scientific problems, in spite of high com¬ 
munications latency. Additional objectives 
are understanding the design parameters 


for high-bandwidth networks and how to 
build and operate them. 

The project will harness computer and 
data resources at four institutions with an 
800-Mbits/sec network: the Los Alamos 
National Laboratory, the California Insti¬ 
tute of Technology, the Jet Propulsion 
Laboratory, and the San Diego Supercom¬ 
puter Center. Telecommunications com¬ 
panies MCI, Pacific Bell, and US West will 
also participate. 

Casa will use algorithms and software 
environments developed for parallel com¬ 
puting, such as Cros, Express, Cosmic 
Environment/Reactive Kernel, Linda, and 
Strand 88. These systems provide mecha¬ 


nisms for sending data between processes, 
for di stributing data among several proces¬ 
sors, and for overlapping communication 
with computation. Researchers will work 
with these systems and adapt them to a 
wide-area distributed computing environ¬ 
ment with high communications latency. 

Two research issues are how to devise 
algorithms that hide latency and how to 
write or modify applications software to 
run in a distributed fashion. Researchers 
will organize the computations so that 
communications latency over the network 
can overlap computations, and they will 
develop algorithms that minimize the 
number of messages by predicting in each 
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processor the values being computed by 
other processors and eventually needed by 
the given processor. 

Casa will adapt applications from chem¬ 
istry, geophysics, and climate modeling to 
run in a distributed fashion. 

• Researchers will perform chemical re¬ 
action dynamics computations to study the 
reaction of fluorine and hydrogen, which is 
relevant to powerful chemical lasers. These 
computations involve operations on very 
large matrices and require frequent com¬ 
munication of large blocks of data between 
the participating computers. 

• Researchers will also develop an inter¬ 
active visualization program for geological 
applications that takes input from Landsat, 
seismic, and topographic databases. Among 
the benefits of such analyses will be clearer 
identification of fault zones, plate thrusts, 
and surface erosion effects, and improved 
ability to predict earthquake magnitude. 

• Finally, researchers will develop a cli¬ 
mate modeling application combining ocean 
and atmosphere models simultaneously 
running on separate computers and con¬ 
tinually exchanging boundary data across 
the Casa network. The resulting concurrent 
dynamic model will be more realistic than 
existing models using static data. The model 
will be used to predict long-term global 
climate changes. 

The network and its associated software 
will support distributed computing with 
high-level user interfaces and customary 
local and wide area network services such 
as remote log in, file transfer, sockets, and 
remote procedure calls, allowing backward 
compatibility with current computer sys¬ 
tems. Standard software such as X Win¬ 
dows will support full-color, high-resolution 
images for distributed applications with 
remote data sources and display devices. 

Casa researchers plan to work with the 
other testbed groups to create an appropri¬ 
ate protocol or set of protocols to carry out 
the applications. Researchers will also 
provide management tools to monitor link¬ 
up status, flow control, error control, and 
port contention on the high-speed switch¬ 
es. Also, Los Alamos will design special 
test devices to diagnose all testbed hard¬ 
ware components as well as to gather reli¬ 
ability measurements. 


The Nectar Testbed 

For the Nectar testbed project, Carnegie 
Mellon University, the Pittsburgh Super¬ 
computing Center, and Bell Atlantic/Bell 
of Pennsylvania will develop a gigabit/ 
second or higher experimental network to 
connect a variety of high-performance 
hosts. A major component of this work 
will be the development of a Sonet (syn¬ 
chronous optical network) interface with 
which the testbed will be able to connect 
to future telecommunication networks. 
The interface will support asynchronous 
transfer mode (ATM) when that standard is 
finalized. 

Researchers will use the testbed to in¬ 
vestigate high-speed network communica¬ 
tion protocols, operating systems, and 
programming environments. To demon¬ 
strate the use of high-speed networks in 
real-world applications, researchers will 
develop distributed solutions to large- 
scale optimization problems arising from 
engineering designs, and they will devel¬ 
op general methods of solving large com¬ 
putational problems over high-speed 
networks. 

CMU’s Nectar project is one of several 
ongoing projects on which the gigabit Nec¬ 
tar testbed is based. Nectar is a system for 
interconnecting heterogeneous computing 
resources via fiber-optic links, large cross¬ 
bar switches, and dedicated network co¬ 
processors. The current Nectar prototype 
uses 100-Mbits/sec links; the gigabit ver¬ 
sion will use 1-Gbit/sec or faster links. 
CMU intends to jointly produce the gigabit 
Nectar with an industrial partner, making it 
available to other research groups and 
eventually as a commercial product. Both 
the design and delivery schedule for the 
gigabit Nectar have been modified so that 
it can be used in the testbed. 

The Pittsburgh Supercomputing Center 
operates a Cray Y-MP/832 at the Westing- 
house Energy Center, some 26 kilometers 
from the CMU campus. CMU researchers 
using on-campus local area networks cur¬ 
rently access the Cray through a T1 link, 
which severely limits the ability to use 
interactive graphics and to distribute 
computing between the Cray and the cam¬ 
pus resources. As the project moves to a 


distributed, heterogeneous computing en¬ 
vironment, researchers will use the gigabit 
network to connect the Cray to various 
campus resources such as the iWarp paral¬ 
lel machine. This new computing environ¬ 
ment will allow simultaneous use of vari¬ 
ous computer architectures over the network 
to fit an application’s needs. For example, 
a parallel computer will run those parts of 
an application that can be so handled, while 
a conventional supercomputer will deal 
with the rest. 

In 1991, Nectar researchers should com¬ 
plete the Sonet/ATM interface for the gi¬ 
gabit crossbar switches and will be ready 
to connect to the phone system fiber. The 
initial configuration will be based on a 
temporary point-to-point gigabit link con¬ 
necting the Cray and the iWarp. The final 
gigabit configuration will start operation 
in 1992 when the gigabit network copro¬ 
cessor is integrated into the system. This 
final configuration will support general 
network connections. 

For systems software, collaboration be¬ 
tween CMU’s Mach operating system 
project and the Nectar project has led to 
protocols for high-performance networks 
and an initial programming environment 
for a heterogeneous system. Testbed re¬ 
searchers must now extend those environ¬ 
ments to provide the full protocol suite 
needed by the applications and to include 
the Cray, the iWarp, and many workstations 
as computing resources. The researchers 
expect to work with other research groups 
to develop common standards for the new 
protocols and with application developers 
to develop advanced programming envi¬ 
ronments. 

The first applications for the testbed are 
a process-flow-sheet problem that models 
the control, design, and economic perfor¬ 
mance of large-scale chemical plants, and 
the problem of solving large combinatorial 
optimizations, such as the traveling sales¬ 
man problem, whose solutions are essen¬ 
tial to many engineering designs. Using 
these applications, researchers will devise 
new computational methods to use hetero¬ 
geneous computing resources effectively 
on a high-speed network. 
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SPECIAL REPORT 


The Vistanet Testbed 


The Vistanet research project is intend¬ 
ed to help determine whether networks 
based on emerging public-network stan¬ 
dards will satisfy the goals of the National 
Research and Education Network and to 
provide information on specifications for 
those standards. The gigabit testbed will 
provide a foundation for ongoing research 
in the science and technology of very high 
speed, wide-area networking. In addition, 
the testbed will be available to a team of 
researchers with geographically dispersed 
laboratories and dissimilar, highly spe¬ 
cialized computational resources. Although 
the initial network spans only a few tens of 
kilometers, testbed researchers will develop 
specifications to extend the network over 
thousands of kilometers. 

The research objectives require near¬ 
gigabit communications between the re¬ 
search locations and remote computing 
facilities. The project will enhance under¬ 
standing of key networking technologies, 
enable important collaborative research in 
medical image processing, and demonstrate 
the value of a gigabit network. 

The project will require substantial 
funding by the project members — Bell 
South, GTE, MCNC, and the University of 
North Carolina at Chapel Hill — and will 
use such existing resources as a supercom¬ 
puting facility, networking technology, 
communications research infrastructure, 


medical image processing research, and 
installed fiber optic cable facilities. 

Vistanet researchers will undertake a 
collaborative research project whose ap¬ 
plications focus involves planning radia¬ 
tion therapy treatment for cancer patients. 
Direct high-speed connections to such re¬ 
sources will help clinical oncologists cus¬ 
tomize radiation treatment by immediately 
providing new dose distributions for pro¬ 
posed treatment plan changes. Such effi¬ 
cient searches through a complex space of 
treatment parameters are not now possible. 
The application will test initial assump¬ 
tions about how such distributed networks 
will perform. The process of networking 
the application and analyzing the results 
will then become a point of departure for 
the next generation of network research 
and development. 

The project intends to develop a network 
capability to facilitate the high-speed im¬ 
age transfer needed by the applications 
research team. Once deployed, the net¬ 
work will link the North Carolina Super¬ 
computing Center at MCNC with the uni¬ 
versity’s computer graphics and medical 
imaging research facilities. Network capa¬ 
bilities will become available in stages of 
increasing speed. As each stage is attained, 
it will become available for applications 
researchers experimenting with and pro¬ 
gressively refining their network techniques. 


Hardware and software designs will be 
completed to give network access to the 
Cray Y-MP, the Pixel-Planes 5 graphics 
processor, and a medical image worksta¬ 
tion. The final network design will be based 
on proposed high-speed communications 
standards such as Sonet (synchronous op¬ 
tical networks), ATM (asynchronous 
transfer mode), and HPPI (high-perfor¬ 
mance parallel interface) and will use ad¬ 
vanced commercial equipment and tech¬ 
nology wherever possible. 

Researchers will use the facility to study 
and resolve several critical network tech¬ 
nology issues. For example, while estab¬ 
lishing a networking infrastructure, re¬ 
searchers will try to resolve significant 
communications research issues associat¬ 
ed with gigabit networks, focusing on pro¬ 
tocols, performance analysis, and switch¬ 
ing technologies to support multiple- 
service-class gigabit networks. Research¬ 
ers will also define and implement tech¬ 
niques to measure and quantify the use of 
critical network resources and to identify 
such problem areas as network bottlenecks. 
After the network becomes operational, it 
will be extended to additional research 
teams to allow study of more complex 
traffic and network contention issues. 
Vistanet might also be linked to other giga¬ 
bit trial networks. Network extensions will 
raise many, potentially complex issues. 


Who to contact for more information 

Although everyone listed below is a member of the Gigabit 
Testbed Initiative Management Committee, this list does not in¬ 
clude all committee members. Many of the testbeds have more 
than one representative on the committee. 

Chair: Dave Farber, Professor of Computer Sciences, Uni¬ 
versity of Pennsylvania, Department of Computer and Informa¬ 
tion Sciences, 200 South 33rd St., Philadelphia, PA 19104- 
6389 

Aurora: Dave Sincoskie, Bell Communications Research, 
445 South St., Morristown, NJ 07962-1910 

Blanca: Charlie Catlett, Manager, Networking and Systems 
Development, National Center for Supercomputing Applica¬ 
tions, 605 E. Springfield Ave., Champaign, IL 61820 

Casa: Paul Messina, California Institute of Technology, Mail 
Stop 158-79, Pasadena, CA 91125 


Nectar: H.T. Kung, Professor of Computer Science, School 
of Computer Science, Carnegie Mellon University, 5000 Forbes 
Ave., Pittsburgh, PA 15213 

VistaNet: Dan Stevenson, Manager of Communications Re¬ 
search, MCNC, P.O. Box 12889, Research Triangle Park, NC 
27709 

Corporation for National Research Initiatives: Bob Kahn, 
Corporation for National Research Initiatives, 1895 Preston 
White Dr., Suite 100, Reston, VA 22091 

Defense Advanced Research Projects Agency: Ira Richer, 
DARPA/ISTO, 1400 Wilson Blvd., Arlington, VA 22209 

National Science Foundation: Darleen Fisher, National Sci¬ 
ence Foundation, Room 416, 1800 G Street NW, Washington, 
DC 20550 
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AlsysAda cross-compilers 
get you there in no ti me. 

It’s time you knew that 
Alsys, the premier Ada company, 
offers a range of powerful and 
flexible cross-compilers for all 
microprocessors in the Motorola 
MC680X0 and Intel i80X86 
families* to get your applications 
up and running fast. 

Part of the reason for this 
speed are powerful development 
tools such as AdaProbe, a source 
level debugger and program 
viewer providing facilities to 
address both the execution prop¬ 
erties of a program and its static 
structure. In addition, there’s 
support for placing program 
components into ROM, and the 
Alsys Multi-Library Environ¬ 
ment allowing program units to 
be shared among libraries for 
team programming. 

With Alsys’ fuff line of 
cross-compilers you’ll discover 
impressive flexibility and power. 
There’s a configurable run-time 
system giving you full control 
over tasKs, interrupts and all 
components of your application. 
The debugger and transfer utility 
are configurable. Best of all, it’s 
easy to take advantage of all this 
power because there are only a 
few files to modify. 

When you need to get from 
here to there without getting lost 
somewhere in between, use a 
cross-compiler that knows the 
shortest route. 
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STANDARDS 


Editor: Fletcher J. Buckley, 103 Wexford Dr., Cherry Hill, NJ 08003, phone (609) 866-6350, fax (609) 866-7753, Compmailt f.buckley 


The evolving relationship between open standards and technology 

Wayne E. Rosing and Matt M. Perez, Sun Microsystems 


The relationship between open stan¬ 
dards and technology is undergoing a 
change, particularly in the way standards 
are developed and deployed today and in 
their impact on business. In addition to 
integrating mature standards into its sys¬ 
tems, our industry will have to invest 
more time and effort nurturing and pro¬ 
moting fledgling standards. 

Standards represent a challenge and an 
opportunity. The challenge is to deliver 
the best performing, best integrated prod¬ 
ucts that fully support a standard. On the 
other hand, each generation of standards 
represents a baseline to build on. Al¬ 
ready, the more stable standards are in¬ 
fluencing systems design to the point 
that, in some instances, the path to high¬ 
est performance will be through a stan¬ 
dard. 

The dynamics of open standards. 

Open standards are hard to define but 
easy to recognize. In spite of that, most 
people today would agree that the nature 
of standards and the standards-making 
process is changing. 

In the past, standards in our industry 
dealt mostly with technical issues, the 
concern of engineers and designers; to¬ 
day, they are a business issue and the con¬ 
cern of the executive suite. In the past, 
participation in standards required little 
or no investment, and individuals often 
worked on them on their own time; today, 
participation involves a significant 
amount of corporate investment and in¬ 
dustrywide alliances. 

In the past, standards resulted in the 
codification of the state of the practice; 
today, they are defining the state of the 
practice as well. In the past, government 
purchasing practice set standards; today, 
commercial vendors and users develop 
them and promote their use. 

The vendor’s approach to standards 
has evolved. Sun Microsystems provides 
a good example of this. In its early his¬ 
tory, Sun differentiated itself by integrat¬ 
ing a number of existing standards into its 
products (for example, Ethernet). That 
practice proved successful, and many of 
those standards have been widely 


adopted throughout the industry. Today, 
Sun invests more in nurturing new stan¬ 
dards in areas that will promote the 
growth of the industry. 

Universal adoption of standards does 
not imply an end to competitiveness. The 
challenge will be to deliver the best per¬ 
forming, best integrated products that 
fully support a standard. This will be the 
focus of the competitiveness that drives 
our industry and has made it so success¬ 
ful. 

For example, the Sun GX hardware 
graphics accelerator has features to ac¬ 
celerate XI1 and Postscript rendering. 
This is one case where high performance 
is delivered through a standard. Another 
example is that of the printer manufac¬ 
turer QMS, which has implemented CGM 
directly on its printers. This cuts down 
communications overhead and acceler¬ 
ates CGM rendering directly. QMS also 
accelerates color Postscript. 

Alongside competitiveness, industry¬ 
wide cooperation and alliances are on the 
increase. In cases where needed stan¬ 
dards do not exist, vendors and users are 
working together and establishing or¬ 
ganizations to create their standards. 

Successful players in this environment 
will make their in-house technology 
openly available. As in the past, Sun will 
continue to support that practice (as with 
NFS). The needs of vendors and users 
will determine the need for new stan¬ 
dards, and it will be more difficult (and 
less desirable) for any one player to im¬ 
pose its own technology on the rest. 

For example, the Object Management 
Group, an industrywide association, is 
dedicated to promoting applications 
interoperability in an object-oriented en¬ 
vironment. This is an emerging technol¬ 
ogy, requiring long-term investment and 
nurturing before fruition. Industrywide 
cooperation is a must in this case because, 
by its very nature, interoperability, like 
networking, can succeed only if it can 
work across heterogeneous systems. 

Types of standards. What we call a 
standard, and the character of the bodies 
bringing forth these standards, has 


changed. Today, in addition to de facto 
and government-sponsored standards, 
we have consortium-backed standards. 
There are standards and would-be stan¬ 
dards in many areas of our industry. For 
example: 

• Software libraries: GKS, PHIGS, 
PHIGS+, PIK, Renderman. 

• Window system server protocols: X, 
PEX, IEX, VEX, Postscript/News. 

• File-based data interchange: CGM, 
IGES/PDES/Step, TIFF, Render- 
man’s RIB. 

• Open systems: Posix.l, SVR4, 
OSF/1. 

• Networking: Ethernet, FDDI, ISDN, 
ONC/NFS, NCS, HPPI. 

• Multimedia: CD-ROM, CD-I, DVI, 
NTSC, PAL, HDTV. 

• User interface: Open Look, Motif, 
Presentation Manager. 

• Mass storage: SCSI, IPI. 

. System buses: Multibus, VME, Fu- 
turebus, Sbus. 

• Serial buses: RS-232/RS-422, IEEE 
PI394, ADB, MIDI. 

• Character coding: 7-bit ASCII, ISO 
(e.g., 8859, 10646), Unicode. 

Examples of new areas of focus are 

• Performance evaluation: SPEC, 
NCGA’s GPC 

• Applications environments bodies: 
OMG, CFI (i.e., CAD Framework 
Initiative), ISO (e.g., SC24WG1). 

From the perspective of the process 
that brings forth these standards, they can 
be categorized as follows: 

• Official: GKS, PHIGS, CGM, IEEE 
802.3 (Ethernet), FDDI, ISDN, 
NTSC, PAL, HDTV, SCSI, IPI, RS- 
232/RS-422; Multibus, VME, Fu- 
turebus; IGES/PDES/Step, TIFF; 
Posix 

• Government sponsored: FIPS, 
CALS, regulatory standards (e.g., 
FCC’s EMI specifications) 

• De facto: PHIGS+, ONC/NFS, HPPI, 
CD-ROM, Renderman, SVR4 
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Glossary 


ADB 

Apple Desktop Bus 

ANSI 

American National Standards Institute 

CALS 

Computer-aided acquisition and logistics support (see FIPS) 

CD-I 

Compact Disc — Interactive 

CD-ROM 

Compact Disc — Read-Only Memory (Phillips/Sony) 

CFI 

CAD Framework Initiative (Guidelines for design automation frameworks to enable the coexistence 
and cooperation of a variety of tools) 

CFL 

CAD Framework Lab (Microelectronics and Computer Tech. Corp. group offering CFI technical support) 

CGM 

Computer Graphics Metafile (ISO/ANSI) 

CVI 

Digital Video Interactive (Intel) 

Ethernet 

Local area network standard (IEEE) 

FDDI 

Fiber Distributed Data Interface (ANSI) 

FIPS 

Federal Information Processing Standard (see CALS) 

Futurebus 

32-bit mass bus, backplane (IEEE) 

GKS 

Graphics Kernel Standard (2D graphics package driven by flat, non-hierarchical display list) (ANSI/ISO) 

GPC 

Graphics Performance Committee (see SPEC, NCGA) 

HDTV 

High Definition Television 

HPPI (nee HSC) 

High-Performance Parallel Interface (ANSI/ISO) 

HSC 

High-speed channel 

IEC 

International Electrotechnical Commission 

IEEE PI394 

Serial bus proposal 

IEX 

Imaging Extensions for X (see PEX, VEX, X Consortium) 

IGES 

Initial Graphics Exchange Standard (ANSI/ISO) 

IPI 

Intelligent Peripheral Interface 

ISDN 

Integrated Services Digital Network (AT&T/ISO) 

ISO 

International Organization for Standardization 

MIDI 

Musical Instrument Digital Interface 

Motif 

X Look & Feel and API (OSF) 

Multibus 

Trade name for popular 16-bit mass bus (Intel/IEEE) 

NCGA 

National Computer Graphics Association 

NCS 

Network Computer System 

News 

Networked Window System (Sun Microsystems) 

NFS 

Network File System (Sun Microsystems) 

NTSC 

National Television Systems Committee 

OMG 

Object Management Group 

ONC 

Open Network Computing (Sun Microsystems) 

Open Look 

Open Windows Look & Feel (see Motif) (AT&T, Unix International) 

OSF 

Open Software Foundation 

OSF/1 

First release of OSF Unix (see SVR4, OSF) 

PAL 

Phase Alternate Line (European color televison system) 

PDES 

Product Data Exchange Specifiction (ANSI/ISO) 

PEX 

PHIGS Extensions for X (see IEX, VEX, X Consortium) 

PHIGS 

Programmers’ Hierarchical Interactive Graphics Standard (3D graphics package driven by a central 
hierarchical data structure) (ANSI/ISO) 

PHIGS+ 

Surface rendering extensions to PHIGS (ANSI/ISO) 

PIK 

Programmers' Imaging Kernel (ANSI) 

Posix 

IEEE Unix standards 

Postscript 

Page description language (Adobe) 

Renderman 

Scene description language for photorealistic rendering (Pixar) 

RIB 

Renderman’s Interface Binary (scene description file format) (Pixar) 

RS-232/RS-422 

Serial interconnect (IEEE) 

Sbus 

Open mass bus (Sun Microsystems) 

SC24 

Subcommittee 24 on Computer Graphics (ISO/IEC Joint Technical Committee 1) 

SC24WG1 

SC24’s Working Group on graphics architecture (includes rapporteur groups of user requirements and 
reference models) (ISO/IEC Joint Technical Committee 1) 

SCSI 

Small Computer Systems Interface 

SPEC 

System Performance Evaluation Committee (see GPC) 

Step 

Standard for the Exchange of Product Model Data (ANSI/ISO) 

SVR4 

System V release 4 of Unix (see OSF/1) (AT&T/Unix International) 

TIFF 

Tag Image File Format (Aldus/Microsoft) 

Unicode 

16-bit character encoding (Unicode Consortium) 

VEX 

Video Extensions for X (see IEX, PEX, X Consortium) 

VME 

Versabus Modified for Eurocard (32-bit mass bus) (Motorola/IEEE) 

X 

X window server and protocol (X Consortium) 

XPA 

X/Open Portability Guide (X/Open) 
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• Consortium backed: X, PEX, IEX, 
VEX, CD-I, DVI, Open Look, Motif, 
Presentation Manager, MIDI, SPEC, 
GPC, OSF/1, SVR4, Ethernet (IEEE 
802.3), XPG (X/Open Portability 
Guide), ONC/NFS, NCS, Unicode. 

These categories are not always clear 
cut. For example, Ethernet can be catego¬ 
rized as both official (that is, IEEE 802) 
and consortium backed (Xerox, DEC, In¬ 
tel). In fact, many of these processes 
overlap, and these organizations must 
work together. As an example, Unix 
International and OSF developers have 
collaborated in a work group on multi¬ 
processor support.' In addition, a Posix 
group is being formed to formalize the 
work it has started. 

The speed and visibility with which 
some of these standards (such as 
PHIGS+) have developed show an in¬ 
creased sophistication in the develop¬ 
ment of standards. A sign of the maturing 
of the industry at large, this change went 
unnoticed for a time and surprised the few 
who held on to the stereotype of standards 
as “slow and irrelevant.” The future is 
bound to bring us even more surprises 
and, as these standards gain in popularity, 
chances are the stereotype will shift to “if 
it is based on a standard, it must be fast.” 

Metric of success for open stan¬ 
dards. A popular benchmark for a stan¬ 
dard’s success has been its popularity: If 
it is used by a large or influential sector of 
its intended user base, then it is consid¬ 
ered successful. But, today it is also very 
important that the technology be “open.” 

Nonetheless, popularity alone is no 
longer enough. What makes standards 
significant today is their ability to lower 
the cost of development for vendors, 
lower the cost of ownership (including 
training and support) for users, provide 
users with vendor independence, and 


promote applications that can interoper¬ 
ate across heterogeneous, networked 
systems in multinational, multilingual 
environments. In the long run, only open 
standards can meet these goals. 

An effective benchmark for what 
qualifies as an open system has been 
given by Gilbert Williamson, president 
of NCR. First, are the vendor’s systems 
built on nonproprietary industry stan¬ 
dards, available from multiple sources? 
Secondly, if the vendor brings out new 
technology, does that vendor immedi¬ 
ately make it available to the industry 
through nonrestrictive, practical licens¬ 
ing? Finally, does the vendor offer a mi¬ 
gration path to an open environment for 
its proprietary systems users? 2 

Motivation for open standards. The 

pragmatic motivation for integrating 
standards into commercial systems is to 
lower the cost of development for ven¬ 
dors and the cost of ownership for users. 
Users gain some measure of vendor inde¬ 
pendence that protects their software in¬ 
vestment. In areas like networking and 
applications interoperability, standardi¬ 
zation is a requirement (that is, no stan¬ 
dards, no networking, no interoperabil¬ 
ity). 

One example of across-the-board cost 
savings is in the use of CD-ROM as a dis¬ 
tribution medium. For example, Sun is 
planning to shift production of its docu¬ 
mentation from paper to a CD-ROM 
product, and Hewlett-Packard has an¬ 
nounced similar plans. The cost of pro¬ 
duction, inventory, and shipping is much 
lower for the vendor; the cost of storage 
and usage is much lower for users. Even 
our forests benefit from this standard. 

Sun, among others, demonstrated that 
the proactive adoption of standards that 
protect users’ software investment is a 
profitable business. Today, these bene¬ 
fits are well understood, and the pro-stan¬ 
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dards strategy has been adopted as a fac¬ 
tor for success in our industry. 

Open standards are a prerequisite for 
quantum growth of our industry. For ex¬ 
ample, the lack of “shrinkwrap” software 
has kept our markets from growing even 
faster. Standards “wars” have increased 
the frustration of would-be customers 
and third-party vendors who can’t decide 
which system to invest in. Mass market, 
commodity software is an industry 
growth factor. 

A key factor in fueling growth in the 
past has been the constant price/perfor¬ 
mance improvements from one product 
generation to the next. As a standard sta¬ 
bilizes, it makes business sense to invest 
in delivering the fastest, lowest priced 
implementation of it possible. In return 
for a relatively low-risk, low-cost invest¬ 
ment (that is, fixed product specifica¬ 
tions, accurate development cost esti¬ 
mates), a vendor can deliver a standard- 
based product that is both a product dif¬ 
ferentiator, (that is, at the low end, cus¬ 
tomers can readily recognize perfor¬ 
mance improvements), and a source of 
extra revenue (for example, at the high 
end, hardware accelerator options). Us¬ 
ers will inevitably benefit from an ever- 
expanding choice of high-performance 
systems at low prices. 

Although price/performance contin¬ 
ues to play a major role in workstation 
purchases, its importance to users has 
diminished. The main purchase criteria 
now focuses on networking, ease-of-use, 
interoperability, availability of applica¬ 
tions, breadth of product line, and up- 
gradability, all areas that can benefit 
from industrywide standards. 

Summing up. By and large, open stan¬ 
dards benefit vendors and users alike, 
helping the market develop the high-vol- 
ume applications required for dramatic 
growth. The industry understands these 
benefits, and this will continue to fuel 
standards-making activities. In our con¬ 
tinued search for product solutions, tech¬ 
nology will persistently move aggres¬ 
sively forward. Successful players in our 
industry will continue to drive their prod¬ 
uct technologies, integrate mature open 
standards, and nurture fledgling ones 
within industrywide organizations. 
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Call for Papers 

THE SECOND INTERNATIONAL CONFERENCE ON 
SYSTEMS INTEGRATION 


IEEE COMPUTER SOCIETY 


© 


ASSOCIATION FOR 
COMPUTING MACHINERY 


Headquarters Plaza Hotel, Morristown, New Jersey 
April 22-25, 1991 

Theme: Managing Large-Scale Integration in the 1990s. 


This conference focuses on the integration of technologies, processes and systems, and the development of mechanisms and tools 
enabling solutions to complex multi-disciplinary problems. A special emphasis is placed on the management of large-scale integration. 
The conference will provide an international and interdisciplinary forum in which researchers and practitioners can share novel research, 
engineering development, and management experiences. Papers should deal with recent work in theory, design, implementation, utilization 
and experiences of integrated processes and systems. Topics to be addressed include, but are not limited to: 

• Process Modeling and Characterization • Re-engineering and Process Simplification • Integration Process in Military, Business and 
Industry Applications • Next Generation Computer Aided Environment for Engineering Design Manufacturing, System Development, etc. • 
Role of Human Engineering in Large-scale Integration • Experiences of Large-scale Integration Projects • The Implication of Systems 
Integration for Manpower Skills • Quality Control in Large-scale Integration • System Architecture for Integration • Automatiom of Processes 
and Systems 

Information and Instructions for Authors: Authors are cordially invited to submit original technical papers to the Program Chairman no 
later than September 14, 1990. All papers must be in English, typed in double spaced format, and may not exceed 6,000 words. Each 
submission should provide a cover page containing author(s), affiliation(s), complete address(es), identification of principal author, and 
telephone number. Also include SIX copies of complete text with a title and abstract. Notice of acceptance will be mailed to the principal 
author(s) by December 3, 1990. If accepted, the author(s) will prepare the final manuscript in time for inclusion in the conference 
proceedings and will present the paper at the conference; otherwise, the author(s) will incur a page charge. Authors of accepted papers 
must sign a copyright release form. 

Please send SIX copies of your paper(s) to Paper Arrival Deadline: 

Program Chairperson: September 14,1990 

Dr. Raymond T. Yeh Acceptance Notification Deadline: 

do Prof. Peter A. Ng December 3,1990 

Dept, of Computer & Information Science Final Manuscript Inclusion 

New Jersey Institute of Technology Deadline: January 7, 1991 

University Heights 

Newark, NJ 07102, U.S.A. 

For further information contact Peter A. Ng, Department of Computer and Information Science, New Jersey Institute of 
Technology, University Heights, Newark, NJ 07102, U.S.A., (201) 596-3387, ng_p@vienna.njit.edu 
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Raymond T. Yeh, 

Syscorp Int’l 

Herbert Weber, 

University of Dortmund 

Fumihiko Kamijo, IPA 


No. American Program 
Co-Chair: 

So. American Program 
Co-Chair: 

Tutorials Chair: 

Local Arrangement Chair: 


Murat Tanik, 
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Naval Postgraduate 
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Call for Papers Jl 

1991 IEEE Symposium on 
Research in Security and Privacy _ 


May 20-22, 1991 • Oakland, California 

Sponsored by 

IEEE Computer Society 

Technical Committee on Security and Privacy 

In cooperation with 

The International Association for 

Cryptologic Research (IACR) 


The purpose of this symposium is to bring together researchers and developers who work on secure computer systems. 
The symposium will address advances in the theory, design, implementation, evaluation and application of secure computer 
systems. Papers, panel session proposals, and position papers are solicited in the following areas: 


• Secure Systems 

• Information Flow 

• Privacy Issues 

• Network Security 

• Viruses and Worms 

• Formal Models 

• Database Security 

• Security Verification and Validation 

• Access Controls 

• Authentication 

• Auditing and Intrusion Detection 

• Data Integrity 


Instructions To Authors: 

Send six copies of your papers, panel session proposals, and 
position papers to Teresa Lunt, program co-chair, at the 
address given below. 

We provide “blind” refereeing. Put names and affiliations of 
authors on a separate cover page only. Abstracts, electronic 
submissions, late submissions, and papers that cannot be pub¬ 
lished in the proceedings will not be accepted. Papers sub¬ 
mitted from outside North America should be sent via Federal 
Express or other overnight courier service. 

Papers must be received by November 5, 1990 and must not 
exceed 25 pages. Authors will be required to certify prior to 
December 21, 1990 that any and all necessary clearances for 
publication have been obtained. Authors will be notified of 
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The Symposium will include informal poster sessions. Poster I 
session papers will appear in a special issue of Cipher that 1 
will be published to coincide with the symposium. Send one ] 
copy of your poster session paper to David Bailey, Cipher 
editor, at the address given below, by February 1, 1991. Elec¬ 
tronic submission of the latex source for poster session papers 
is strongly encouraged. Poster session authors must send a I 
certification with their submittal that any and all necessary I 
clearances for publication have been obtained. 
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Contributions to Update are welcome. Send news of public policy or professional issues and of industrial or university research to Steve Wilcox, 10662 Los Vaqueros Circle, PO Box 
3014, Los Alamitos, CA 90720-1264, or to Editor-in-Chief Bruce D.Shriver, Vice President for Research, University of Southwestern Louisiana, Drawer 42370, Lafayette, LA, 70504. 


NSF announces visiting professorships for women 


The National Science Foundation has 
launched a program to provide opportu¬ 
nities for women to advance their careers 
in engineering and scientific disciplines. 
A principal objective of the NSF Visiting 
Professorships for Women program is to 
increase the visibility of women scientists 
and engineers in industry, government, 
and academic institutions and thereby 
encourage women students to pursue ca¬ 
reers in these fields. The foundation is 
particularly interested in increasing par¬ 
ticipation in research by minority women 
and women with disabilities. 


The program enables a woman scien¬ 
tist or engineer to undertake advanced re¬ 
search at a host institution — a university 
or four-year college with the necessary 
facilities. In addition to research, the vis¬ 
iting professor undertakes lecturing, 
counseling, and other student-related 
tasks. The research must be in a field nor¬ 
mally supported by the NSF and can be 
independent or collaborative. 

The usual award will be for 12 months 
for a full- or part-time professorship. 
Awards for one academic semester will 
be considered, as will proposals for 


periods of up to 24 months. 

Eligibility requirements include a doc¬ 
torate in a field of research supported by 
NSF (in exceptional circumstances 
equivalent experience will be accepted) 
and independent research experience in 
an academic institution, industry, or the 
public sector. 

Proposals are due by November 15. In¬ 
quiries about the program should be made 
to the Program Director, NSF Visiting 
Professorships for Women, Room 1225, 
National Science Foundation, Washing¬ 
ton, DC 20550, phone (202) 357-7734. 


Craig Fields joins MCC as president 


Craig Fields, former director of the 
Defense Advanced Research Projects 
Agency, has been named president, chief 
technical officer, and chief operating 
officer of Microelectronics and Com¬ 
puter Technology Corp. 

Grant Dove, MCC chair and chief ex¬ 
ecutive officer said he intends to nomi¬ 
nate Fields for the CEO position next 
year, allowing Dove to assume “a less 
than full-time role as chairman of the 
board.” 

As president, CTO, and COO, Fields 
will be responsible for research pro¬ 
grams, corporate planning and market¬ 


ing, and human resources. 

Fields left his post as the head of 
DARPA in late April amid a storm of 
rumors that he had been removed against 
his will because of his advocacy for so- 
called dual-use technologies. Specifi¬ 
cally cited at the time was DARPA’s deci¬ 
sion to invest $4 million in Gazelle Micro- 
circuits, an electronics firm working on 
gallium arsenide products with both ci¬ 
vilian and military applications. 

Published reports at the time and sev¬ 
eral angry legislators alleged that Fields 
ran afoul of Bush administration officials 
who opposed the idea of funding specific 


technologies and industries while ignor¬ 
ing others, while the Defense Dept, main¬ 
tained that Fields merely accepted a new 
position as deputy director of the Defense 
Research and Engineering Organization. 

Fields joined DARPA in 1974, was 
named deputy director for research in 
1987, and became director in May 1989. 

He has also played a key role in the 
planning and the technical and financial 
management of the Strategic Computing 
Program, a national effort to develop 
such technologies as fifth-generation 
multiprocessor supercomputers, artifi¬ 
cial intelligence, and microelectronics. 


Foundation will encourage computer-based communications policies 


Mitchell D. Kapor, founder of Lotus 
Development Corp. and On Technology, 
and colleague John Perry Barlow have es¬ 
tablished a foundation to address social 
and legal issues arising from the use of 
computers as a means of communication 
and information distribution. 

The Electronic Frontier Foundation in¬ 
tends to support and engage in public edu¬ 
cation and discussion on current and fu¬ 
ture developments in computer-based 
and telecommunications media. 


Initial funding for the foundation in¬ 
cluded private contributions from Kapor 
and Steve Wozniak, cofounder of Apple 
Computer. The foundation expects to ac¬ 
tively raise contributions from a wide 
constituency. 

The foundation's stated purposes in¬ 
clude 

(1) supporting educational activities 
to increase popular understanding of op¬ 
portunities and challenges in computing 
and telecommunications; 


(2) developing among policymakers a 
better understanding of telecommunica¬ 
tions issues, and supporting the creation 
of legal and structural approaches that 
will ease the assimilation of new tech¬ 
nologies by society; 

(3) increasing public awareness of 
civil liberties issues arising from rapid 
advancements in computer-based com¬ 
munications media, and supporting liti¬ 
gation concerning First Amendment 
rights as they apply to computing and 
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telecommunications technology; and 

(4) supporting the development of new 
tools to give nontechnical users access to 
computer-based telecommunications. 

As one of its first actions to foster pub¬ 
lic education on significant issues, the 
foundation awarded a grant to Computer 
Professionals for Social Responsibility, 
based in Palo Alto, California. CPSR in- 


IBM offers cash awards 

IBM is inviting authors from industry, 
research, and academia to submit papers 
for cash prizes of $25,000, $15,000, and 
$10,000 for first, second, and third place, 
respectively, in each of five divisions. 

The papers will be presented at the IBM 
Large-Scale Computer Analysis and 
Modeling Conference in Park City, Utah, 
April 24-26, 1991. 

The divisions are 

• physical sciences and mathematics, 

• engineering, 

• life and health sciences, 

• social sciences, humanities, and the 
arts, and 

• computer sciences — distributed and 
cooperative processing. 

Each paper must describe large-scale 
analysis and modeling work using an 
IBM 3090 with Vector Facility as the pri¬ 
mary computational system, or new and 
innovative approaches to analysis and 
modeling using distributed or coopera¬ 
tive processing in which IBM technical 


The partners in the National Science 
Foundation Network, which links more 
than 1,500 university, industry, and gov¬ 
ernment research networks, have begun 
implementing a coast-to-coast research 
and education computer network de¬ 
signed to transmit data 28 times faster 
than any other public access network. 

Scheduled to be operating by the end of 
this year, the T3 network will send infor¬ 
mation at 45 megabits per second, ena¬ 
bling researchers across the United 
States to perform high-speed computing 
applications such as distributed comput¬ 
ing and interactive remote graphics that 
require faster transmission technologies 
than are currently available. 

Among the high-tech resources avail- 


tends to use the grant to expand the scope 
of its ongoing computing and civil liber¬ 
ties projects. 

CPSR plans to host a series of policy 
roundtables in Washington, DC, during 
the next two years with lawmakers, com¬ 
puter users, the FBI, industry representa¬ 
tives, and members of the computer secu¬ 
rity community. Marc Rotenberg, direc¬ 
tor of the CPSR Washington office, said 


in paper competition 

workstations are linked to IBM main¬ 
frames. Judging will be by panels of 
noted non-IBM experts in each division. 

IBM will join in publishing the win¬ 
ning and honorable-mention papers. The 
proceedings will include all prize and 
honorable-mention papers, along with 
abstracts of selected additional papers. 

The competition is open to any individ¬ 
ual or team working or living in the US or 
Canada, excluding IBM employees or 
those of IBM-related companies. Au¬ 
thors must submit an acceptable abstract, 
and registrations must be received by Oc¬ 
tober 16, 1990. Final papers are due by 
January 15, 1991. All necessary informa¬ 
tion is provided in a general information 
brochure available from local IBM 
branch offices or by contacting the IBM 
Competition Administrator at 36 Mill 
Plain Rd., Suite 404, Danbury, CT 06811, 
phone (203) 794-1355, or IBM Canada 
Ltd., Dept. 2/64, 245 Consumers Rd., 
North York, Ontario M2J 1S2, phone 
(416) 758-4136. 


able to researchers using NSFnet are Na¬ 
tional Science Foundation-funded super¬ 
computing centers, library collections, 
satellite data, medical imaging, scientific 
instruments, video applications, and na¬ 
tional databases. 

T3 technology will transmit informa¬ 
tion at more than 5 million characters per 
second (T3 speed), or the equivalent of 
1,400 single-spaced typed pages per sec¬ 
ond. The NSFnet currently operates at T1 
speed, which is almost 200,000 Charac¬ 
ters per second (1.5 megabits per sec¬ 
ond). 

The NSFnet is managed and operated 
by the Merit Computer Network in Ann 
Arbor, Michigan. Merit is a consortium 
of eight Michigan universities. 


the purpose of the meetings will be to 
“begin a dialogue about the new uses of 
electronic media and the protection of the 
public interest.” 

The Electronic Frontier Foundation is 
located at One Cambridge Center, Suite 
300, Cambridge, MA 02142, phone (617) 
577-1385, fax (617) 225-2347, or Inter¬ 
net eff@well.sf.ca.us. 


News briefs 

John R. White elected ACM presi¬ 
dent. The Association for Computing 
Machinery has elected John R. White, as¬ 
sociate manager of the Computer Science 
Laboratory, Xerox Palo Alto Research 
Center, to serve a two-year term as presi¬ 
dent. White joined ACM in 1969 and 
served in a number of senior volunteer 
positions, including vice president for 
1988-90. 

"I am firmly committed to seeing ACM 
enhance its role as an international or¬ 
ganization," White said. "Events in Eu¬ 
rope demand it; our charter requires it." 

S. Ron Oliver, an associate professor in 
the Department of Computer Science at 
California Polytechnic State University, 
San Luis Obispo, was elected ACM vice 
president. Barbara Simons, a research 
computer scientist at IBM’s Almaden 
Research Center, San Jose, California, 
was elected secretary. 

Computer pioneer Licklider dead at 

75. Computing pioneer J.C.R. Licklider 
died June 26 from complications of an 
asthma attack. His death was announced 
by the Massachusetts Institute of Tech¬ 
nology, where he was a professor emeri¬ 
tus in electrical engineering. 

From 1968 to 1970, Licklider headed 
Project MAC, the first DARPA-spon- 
sored large-scale experimental computer 
science research project at a university. 
Project MAC is now the MIT Laboratory 
for Computer Science. Licklider intro¬ 
duced the concepts of digital computers 
and telecommunications into the process 
of storing and retrieving information in 
libraries. 

Roy Nutt succumbs to cancer at 59. 

Roy Nutt, a pioneer in the computer soft¬ 
ware industry and cofounder and director 
of Computer Sciences Corp., died in Se¬ 
attle, Washington, June 14 after a year¬ 
long bout with cancer. He was well 
known for his participation in the devel¬ 
opment of programming languages for 
business and scientific purposes, and for 
subsequent contributions to the advance- 
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ment of software technology. 

As United Aircraft’s representative to 
IBM’s Share user organization, Nutt de¬ 
signed and developed the first widely 
used symbolic assembly program, called 
SAP, and was one of the small team of 
programmers who developed the original 
Fortran language and compiler. 

Possible $100,000 prize announced 
in Turing Test competition. The 

Loebner Prize, a new prize in the behav¬ 
ioral and computer sciences, will be 
awarded annually for the computer pro¬ 
gram that best emulates natural human 
behavior. Initial cash awards will be 
based on the interest generated from a 
fund established this year by Hugh G. 
Loebner, a New York philanthropist and 
businessman. If at some point a program 
passes the test “in all its particulars,” the 
entire fund — expected to be worth at 
least $100,000 — will be paid to the pro¬ 
gram designer, and the prize will be abol¬ 
ished. 

A maximum of 10 finalists will com¬ 
pete in Cambridge, Massachusetts, in the 
fall of 1991. The deadline for submis¬ 
sions is May 31, 1991. Further informa¬ 
tion can be obtained from Robert Epstein, 
Executive Director, Cambridge Center 
for Behavioral Studies, 11 Waterhouse 
St., Cambridge, MA 02138, e-mail 
psy9ddn@buacca.bu.edu. 

Nominations sought for 1991 Alan T. 
Waterman Award competition. In 1975 
Congress established the Alan T. Water¬ 
man Award to mark the 25th anniversary 
of the National Science Foundation and 
to honor the foundation’s first director. 
The award is intended to recognize an 
outstanding young scientist in any field 
of science or engineering supported by 
the NSF. The recipient receives grants of 
up to $500,000 for a period of up to three 
years of scientific research or advanced 
study at the institution of the recipient’s 
choice. 

Candidates must be US citizens age 35 
or younger, or be no more than five years 
beyond receipt of a PhD. They should 
have completed sufficient scientific or 
engineering research to have demon¬ 
strated, through personal accomplish¬ 
ments, outstanding capability and excep¬ 
tional promise for significant future 
achievement. Candidates should exhibit 
quality, innovation, and potential for dis¬ 
covery in their research. 

Fifteen copies of each nomination 
should be submitted to the Alan T. Water¬ 
man Award Committee, Room 545, Na¬ 
tional Science Foundation, 1800 G St., 
NW, Washington, DC 20550. Additional 
information is available from Executive 
Secretary Susan E. Fannoney, (202) 357- 
7512. 
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Board of Governors acts to restore 
financial reserves 


Guylaine Pollock, Computer Society News editor 


Meeting on June 8 in San Francisco, the 
IEEE Computer Society Board of Gover¬ 
nors took several actions to strengthen 
the society’s financial stability and to as¬ 
sure adequate reserves for unexpected 
downturns and working capital for new or 
expanded member services. These ac¬ 
tions included a $4 increase in the mem¬ 
ber fee and adjustments to magazine and 
transactions page budgets and subscrip- 


Financial analysis. Society Treasurer 
Joseph Boykin and President-Elect Dun¬ 
can Lawrie presented extensive analyses 
of the society’s finances to the board. 

They emphasized that although the soci¬ 
ety’s operating budget has generally 
shown a surplus over the past several 
years, such surpluses were due to nonre¬ 
curring income sources such as the now- 
defunct National Computer Conference 
and financial distributions formerly re¬ 
ceived from AFIPS. When only operating 
income is compared to operating ex¬ 
penses, the society has been experiencing 
effective deficits, Boykin and Lawrie ex¬ 
plained. Further, the operating budget 
does not reflect capital expenditures and 
transfers to technical committee and 
other activity accounts. The result has 
been the steady erosion of the society’s 
liquid reserves since 1984, capped by the 

1989 actual deficit of more than 
$300,000. (See treasurer’s report, Com¬ 
puter, July 1990, pp. 6-9.) 

The board determined that it must re¬ 
verse this erosion of liquid reserves. It 
acted to ensure that the society ended 

1990 with a break-even budget and 
adopted a policy of budgeting a minimum 
$750,000 annual surplus beginning in 
1991. The board recognized that this 
amount, while large, represents less than 


4 percent of the society’s $20.5 million 
annual budget. Through these actions and 
prudent capital budgeting, the board 
plans to restore the working capital re¬ 
serve to policy guideline levels within 
three to five years. 

1990 break-even budget. The board 
accomplished a break-even 1990 budget 
in part by reducing editorial page budgets 
for some of the society periodicals. In ad¬ 
dition, it deferred filling several staff va¬ 
cancies and is seeking economies in sev¬ 
eral other areas of the budget. Current 
projections show the society ending 1990 
with a $52,500 budgetary surplus. To 
provide for contingencies, the board em¬ 
powered the president to form an ad hoc 
committee with the power to cut expenses 
to keep the 1990 net revenues from drop¬ 
ping below zero. 

1991 member fee, page budgets, sub¬ 
scription rates. The society’s annual 
budget is not adopted until the annual 
meeting in November, but the member 
fee, periodical pricing, and editorial page 
budgets must be determined at the mid¬ 
year meeting. To meet society financial 
goals, the board increased the 1990 mem¬ 
ber fee to $22 a year from the 1990 level of 
$18. Because member fees increased $3 
last year, the board passed a resolution 
recommending that the 1991 and 1992 
Boards of Governors strive to avoid fur¬ 
ther increases in the member fee through 
1993. 

The society’s 11 periodical publica¬ 
tions constitute a large portion of the 
overall budget. To improve the net in this 
program, the board decided it must de¬ 
crease expenses (primarily editorial page 
budgets) or increase income through 
higher subscription fees. After extensive 


September 1990 









deliberation, the board accepted the rec¬ 
ommendations of the Publications Board 
for 1991 periodical page budgets and 
prices. These recommendations in¬ 
creased 1991 subscription rates and re¬ 
adjusted page budgets among the maga¬ 
zines and transactions so that more edito¬ 
rial pages are available to the higher 
interest optional periodicals. 

Page budget increases for 1991 were 
approved for three magazines and two 
transactions (figures are per year com¬ 
pared to budgeted 1990 levels): IEEE 
Computer Graphics and Applications, 
+48 pages; IEEE Software, +32 pages; 
IEEE Expert, +50 pages; IEEE Transac¬ 
tions on Pattern Analysis and Machine 
Intelligence, +64 pages; and IEEE Trans¬ 
actions on Knowledge and Data Engi¬ 
neering, +128 pages. 

Page budget decreases were approved 
for Computer, -102 pages; IEEE Micro, 
-12 pages; and IEEE Transactions on 
Software Engineering, -192 pages. In ad¬ 
dition, IEEE Design & Test will decrease 
its frequency from six to four issues a 
year. (Previously, the page budget for 
IEEE Transactions on Software Engi¬ 
neering had been increased to eliminate a 
backlog, and the budget for IEEE D&T 
had been decreased to cut production 

Member subscription rates for 1991 for 
all society periodicals were increased by 
amounts ranging from $1 to $5 per year. 
Nonmember (library) and sister society 
rates were also increased. Table 1 shows 
the approved 1991 periodical page budg¬ 
ets and prices. 

New editors-in-chief. The board con¬ 
sented to the president’s appointment of 
six new editors-in-chief for two-year 
terms which begin in January 1991, as 
follows: 

• Jon T. Butler, Computer 

• Carl K. Chang, IEEE Software 

• Dante Del Corso, IEEE Micro 

• Anil K. Jain, IEEE Transactions on 
Pattern Analysis and Machine Intel¬ 
ligence 

• Earl E. Swartzlander, IEEE Transac¬ 
tions on Computers 

• Peter R. Wilson, IEEE Computer 
Graphics and Applications 

The board also approved the appoint¬ 
ment of C.V. Ramamoorthy to a second 
two-year term as editor-in-chief of IEEE 
Transactions on Knowledge and Data 
Engineering. 

Society structure. Because the Com¬ 
puter Society has grown over the past 10 
to 15 years from a relatively small opera¬ 
tion to a large operation, with many dif¬ 
ferent functions and products, the Board 
of Governors directed the Executive 


Committee to devise and present a plan at 
the November 1990 meeting for imple¬ 
menting a “large corporate structure” 
form of management for the society. 

Other actions. The board approved 
several changes to the Policies and Proce¬ 
dures Manual (PPM). As recommended 
by Duncan Lawrie, president-elect and 
chair of the Constitution and Bylaws 
Committee, the executive director can 
now modify the annual staffing plan dur¬ 
ing the year as long as the changes are 
within the approved operating budget and 
reported to the board at its next meeting. 
The Constitution and Bylaws Committee 
also recommended some minor, house¬ 
keeping modifications that were adopted 
by the board. 

On the recommendation of Mario Bar- 
bacci, vice president for technical activi¬ 
ties, new provisions for a Technical Ac¬ 
tivities Board treasurer and finance com¬ 


mittee were added to the PPM. 

As recommended by Joseph Urban, 
Awards Committee chair, the board de¬ 
leted the John von Neumann Award from 
the PPM and asked the committee for a 
new proposal that will not conflict with 
the John von Neumann Medal recently 
established by IEEE. 

The board also approved 

• a change of name and scope for the 
Technical Committee on Operating 
Systems, which becomes the TC on 
Operating Systems and Application 
Environments; 

• the merger of the Area Activities 
Board and the Membership and In¬ 
formation Board into a new Mem¬ 
bership Activities Board, effective 
in 1991; 

• a change to allow elected vice presi¬ 
dents to serve up to four consecutive 
terms rather than two; 


Table 1. 1991 periodical page budgets, frequency, and prices. 



Pages 

Issues 
per Year 

Member 

Sister 

Society 

Nonmember 

IEEE Transactions 
on Computers 

1,520 

12 

$24 

$39 

$235 

IEEE Transactions 
on Software Engineering 

1,392 

12 

$22 

$39 

$226 

IEEE Transactions 
on Pattern Analysis 
and Machine Intelligence 

1,328 

12 

$24 

$39 

$222 

IEEE Transactions 
on Knowledge and 

Data Engineering 

592 

4 

$15 

$27 

$138 

IEEE Transactions 
on Parallel and 
Distributed Systems 

528 

4 

$14 

$26 

$131 

Computer 

1,246 

12 

* 

$54** 

$216 

IEEE Computer 

Graphics and 
Applications 

660 

6 

$24 

$39 

$150 

IEEE Micro 

600 

6 

$21 

$38 

$144 

IEEE Design 
& Test 

446 

4 

$22 

$39 

$121 

IEEE Software 

692 

6 

$25 

$39 

$154 

IEEE Expert 

600 

6 

$20 

$36 

$144 


* Subscription to Computer is included with membership 
k * Affiliate membership rate dependent on 1F.F.E board action 
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withdrawing from the Institute for 
the Certification of Computing Pro¬ 
fessionals (ICCP) and investigating 
alternative certification possibilities 
in cooperation with the ACM; and 
the principle of establishing a coop¬ 
erative arrangement with IEEE in the 


society’s European Office, delegat¬ 
ing authority to the president to nego¬ 
tiate the details. 

In addition, the board created an ad hoc 
committee made up of the president, past 
president, and president-elect to enter 


into discussions with AFIPS, IFIP, etc., 
to improve the relationship between the 
societies and to take such actions as they 
may deem appropriate regarding these 
organizations and the Computer Soci¬ 
ety’s future participation in their activi¬ 
ties. 


Computer Communications TC stresses conferences, standards 

Kenneth J. Thurber, Chair, Technical Committee on Computer Communications 


The IEEE Computer Society’s Techni¬ 
cal Committee on Computer Communi¬ 
cations (TCCC) is an international group 
focusing on issues involved in the elec¬ 
tronic linking of computer systems. 
Founded more than 20 years ago, the TC’s 
primary activities are the development 
and presentation of conferences, work¬ 
shops, and symposia, along with sponsor¬ 
ship of IEEE 802 standards work. 

The TC sponsors two meetings annu¬ 
ally. The first, Infocom, cosponsored 
with the IEEE Communications Society, 
has been held for several years. This con¬ 
ference was started by the TCCC in con¬ 
junction with our associates in the Com¬ 
munications Society’s technical commit¬ 
tees on computer and data communica¬ 
tion. It has become the premier technical 
conference in its area and a major interna¬ 
tional forum for technical exchange, with 
a large attendance. Infocom offers a wide 
range of technical sessions and a high 
level of technical information content. A 
strong tutorial program provides not only 
education for newcomers in the field but 
also discussions of advanced topics in 
specialized areas. The most recent In¬ 
focom took place in June in San Fran¬ 
cisco. 

The second annually sponsored meet¬ 
ing is the Conference on Local Computer 
Networking. Once small and specialized, 
this conference has become the top tech¬ 
nical conference on LAN technology. It 
focuses on the practical aspects of the 
field and has expanded to include three 
full-session tracks for two days while 
providing for a full day of preconference 
seminars. The conference is recognized 
as the major forum for practitioners to 
discuss their results in a noncommercial 
environment. 

The 15th annual Conference on Local 
Computer Networking will be held Octo¬ 
ber 1-3, 1990, in Minneapolis, Minne¬ 
sota, and will include sessions on stan¬ 
dards, fiber distributed-data interface 
(FDDI), integrated services networks, 
gigabit networks, military networks. 


protocol performance, high-perfor¬ 
mance protocols, internetworking, the 
future of networking, and networks for 
real-time systems. Tutorials on Open 
Systems Interconnection (OSI), simple 
network-management protocol (SNMP), 
and FDDI are also planned. International 
attendance has been strong during the 
past three years, and a special effort is 
being made this year to increase interna¬ 
tional participation through solicitation 
of potential participants from Europe and 
Asia. More information is available from 
program co-chairs Marc Cohn (415) 361 - 
3902 and Jim Mollenauer (508) 562- 
2100. 

TCCC continues to support IEEE 802 
LAN standards efforts, and TC members 
remain the Computer Society’s overall 
voting focal point on these critical stan¬ 
dards. The efforts of the IEEE 802 Stan¬ 
dards Committee have brought order to 
the havoc that began as “the LAN indus¬ 
try.” IEEE 802 has been successful at 
having its defined standards become ISO 


The annual Eckert-Mauchly Award, 
given by the IEEE Computer Society and 
the Association for Computing Machin¬ 
ery to recognize an individual for “tech¬ 
nical contributions to computer and digi¬ 
tal systems architecture,” this year went 
to Kenneth Batcher, visiting professor in 
the Department of Mathematics at Kent 
State University. 

The award was presented at the ACM/ 
IEEE International Symposium on Com¬ 
puter Architecture in Seattle, Washing¬ 
ton. Batcher was cited for “contributions 
to parallel computer architecture, both 
for pioneering theories in interconnec¬ 
tion networks and for the pioneering im¬ 
plementations of parallel computers. He 
conceived the low-complexity bitonic 


(international) standards, and the com¬ 
mittee’s work is recognized throughout 
the world for its timeliness and quality. 

The TC views the above activities as 
the best way to serve its membership. Its 
primary future activities are expected to 
be the establishment of new conferences 
and symposia in response to members’ 
desires. A subgroup is already planning 
to sponsor a meeting on data compression 
technology for communication systems. 

Strong leadership from volunteers has 
enabled the TC to accomplish its goal of 
maintaining and expanding its confer¬ 
ence and committee activities. The TC is 
staffed entirely by volunteers who ad¬ 
minister and operate its conferences and 
committees. We invite you to join us and 
become active in our efforts. 

For more information on the TC, con¬ 
tact Kenneth J. Thurber, Architecture 
Technology Corp., PO Box 24344, Min¬ 
neapolis, MN 55424, phone (612) 935- 
2035. 


sorting network, as well as the flip net¬ 
work, an early multistage parallel com¬ 
puter interconnection network. He built 
the Staran, Aspro, and MPP parallel com¬ 
puters and has significantly enriched the 
discipline of computer architecture.” 

From 1964 to 1988, Batcher was em¬ 
ployed by the Digital Systems Engineer¬ 
ing Department at Loral Systems Group 
of Akron, Ohio. He has published 28 tech¬ 
nical papers and received 13 patents for 
his software and hardware innovations. 

The Eckert-Mauchly Award is named 
in honor of J. Presper Eckert and John 
Mauchly, co-inventors of ENIAC, the 
first general-purpose electronic com¬ 
puter. 


Kenneth Batcher receives 1990 
Eckert-Mauchly Award 
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Board of Governors acts on bylaws amendments 


The IEEE Computer Society Board of 
Governors has passed for the first time 
three amendments to the society’s by¬ 
laws. The changes were recommended to 
the board by the Constitution and Bylaws 
Committee, chaired by President-elect 
Duncan H. Lawrie. They are published 
here for member comment in anticipation 
of their consideration for the second time 
for final adoption at the November 16 
board meeting in New York. 

Member comments are solicited and 
should be sent to Duncan H. Lawrie, 

Chair, Constitution and Bylaws Commit¬ 
tee, IEEE Computer Society, 1730 Mas¬ 
sachusetts Ave. NW, Washington, DC 
20036-1903. 

Elections Committee 
duties 

The current bylaws do not specify the 
constituency of the Elections Commit¬ 
tee, nor do they require it to inform the 
board in a timely fashion of the elections 
schedule. The proposed changes address 
schedule planning and provide for an 
Elections Committee composed of three 
full society members who are not candi¬ 
dates for office during their term on the 
Elections Committee. 

Article XIV. Standing Committees 
Section 4. Elections Committee 

Current wording: The Elections 
Committee shall be responsible for de¬ 
veloping the timetable for implementing 
the Society’s nominations and elections 
process, notifying the nominations com¬ 
mittee, the candidates, and staff members 
of the required actions, and implement¬ 
ing and monitoring the execution of elec¬ 
tion policies and procedures established 
by the Board of Governors and ruling on 
questions and issues that arise. 

Proposed wording: The Elections 
Committee shall be responsible for de¬ 
veloping the timetable for implementing 
the Society’s nominations and elections 
process, notifying the Board of Gover¬ 
nors, the nominations committee, the 
candidates, and staff members of the re¬ 
quired actions in a timely and appropriate 
manner, and implementing and monitor¬ 
ing the execution of election policies and 
procedures established by the Board of 
Governors and ruling on questions and 


issues that arise. The Elections Commit¬ 
tee shall consist of a minimum of three 
Society members, each with at least full 
member grade, none of whom will be a 
candidate for elected office during the 
term of that Elections Committee. 

Area activities 

The Area Activities Board has been 
under study for the last several years, and 
several different proposals have been 
made regarding possible improvements. 
Some of the programs administered by 
that board, including the Distinguished 
Visitors Program, the Merwin Scholar¬ 
ship Program, and others, represent im¬ 
portant services to the membership that 
should be continued and strengthened. 
However, the Planning Committee rec¬ 
ommended to the Board of Governors 
that the Area Activities Board itself be 
eliminated and that these programs be as¬ 
signed to the Membership and Informa¬ 
tion Activities Board, increasing effi¬ 
ciency while maintaining program 
strength. The board passed for the first 
time a bylaws amendment that will effect 
that change as follows: 

Article VI, Chapter Activities, is de¬ 
leted, and subsequent articles renum¬ 
bered as appropriate. Section 1 is to be 
replaced, and a new Section 6 added 
(see below). Article IX is renumbered 
Article VIII with a title change to 
“Membership Activities Board” (see 
below). 

Section 1. Vice President for Member¬ 
ship Activities 

Current wording: The vice president 
for membership and information activi¬ 
ties shall be responsible for activities in¬ 
cluding membership, information, and 
such other promotional functions as may 
be assigned by the Board of Governors, 
the Executive Committee, or the presi¬ 
dent. The chairpersons of the Member¬ 
ship and Transfers Committee, Admis¬ 
sions and Advancement Committee, and 
Information Activities Committee shall 
report to the vice president for member¬ 
ship and information activities. These 
committee chairpersons shall be ap¬ 
pointed by the president with the recom¬ 
mendation of the vice president for mem¬ 
bership and information activities. The 


president may delegate authority for such 
appointments to the vice president. 

Proposed wording: The vice presi¬ 
dent for membership activities shall chair 
the Membership Activities Board and 
shall be responsible for activities includ¬ 
ing membership, information, promotion 
of the organization of chapters of mem¬ 
bers and students, support for area chap¬ 
ters programs, and such other promo¬ 
tional programs and functions as may be 
assigned by the Board of Governors, the 
Executive Committee, or the president. 

Article VIII, Section 6 

Proposed wording: The Membership 
Activities Board shall establish such 
standing committees as it shall deem ap¬ 
propriate, the names and functions of 
which will be set forth in the Computer 
Society Policies and Procedures Manual 
{PPM). 

Elected vice president 
terms 

Elected vice presidents are restricted 
from being elected to a third consecutive 
term. To bring this limitation in line with 
those for other society offices, both 
elected and appointed, the amendment 
allows for a maximum of four years’ ser¬ 
vice as an elected vice president. 

Article II. Nominations and Elections 
Section 6(4). Officer Qualifications 

Current wording: No individual may 
be elected to the office of president-elect 
more than once, nor may an elected vice 
president be elected to a third year as an 
elected vice president. For this purpose, 
occupying an office for a period less than 
one-half of a normal term shall not be con¬ 
strued as holding that office. 

Proposed wording: No individual 
may be elected to the office of president¬ 
elect more than once, nor may an elected 
vice president be elected to a fifth year as 
an elected vice president. For this pur¬ 
pose, occupying an office for a period 
less than one-half of a normal term shall 
not be construed as holding that office. 
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Proposed amendment to the Computer Society constitution 


At its meeting on June 8, 1990, in San 
Francisco, California, the Board of Gov¬ 
ernors of the IEEE Computer Society ap¬ 
proved an amendment to the constitution 
for submission to the membership for ap¬ 
proval with the 1990 election ballot. Ap¬ 
proval requires for votes by two thirds of 
the members voting. 

Presidential succession. When the 
position of president-elect was created 
several years ago, it was not inserted in 
the line of succession to the presidency. 
Because the person nominated and elect¬ 
ed to the office as president-elect is pre¬ 
sumed to be best qualified to assume the 
presidency, the Board of Governors has 
suggested to the membership that the 
president-elect be first in succession 
should the office of the president become 
vacant for any reason. The first and sec¬ 
ond vice presidents will complete the 
line of succession. Following are the cur¬ 
rent and proposed text for the relevant 
sections of the society’s constitution. 

Article IV, Section 3 

Current wording: The president¬ 
elect shall perform such duties as speci¬ 
fied in the bylaws or assigned by the 


president or the Board. The president¬ 
elect shall become president the follow¬ 
ing year. The incumbent first vice presi¬ 
dent shall assume the office of 
president-elect should that office become 
vacant, thereby vacating the office of 
first vice president. Should the first vice 
president be unable to serve, then the 
Board shall fill the vacancy. 

Proposed wording: The president¬ 
elect shall perform such duties as speci¬ 
fied in the bylaws or assigned by the 
president or the Board. The president¬ 
elect shall become president the follow¬ 
ing year. The president-elect shall act for 
the president should that office be vacat¬ 
ed or in the event of the absence or inca¬ 
pacity of the president. In so doing, the 
president-elect does not vacate the office 
of president-elect. Should the office of 
president-elect become vacant, the Board 
shall fill the vacancy. In the interim, the 
first vice president shall act for the presi¬ 
dent-elect, but shall not assume the of¬ 
fice of president-elect. 

Article IV, Section 4 

Current wording: The first vice 
president shall act for the president in his 


absence or incapacity and shall perform 
such duties as specified in the bylaws or 
assigned by the president. 

Proposed wording: The first vice 
president shall act for the president in the 
event of the absence or incapacity of 
both the president and president-elect, 
and shall perform such duties as speci¬ 
fied in the bylaws or assigned by the 
president. 

Article IV, Section 5 

Current wording: The second vice 
president shall act for the president in the 
absence or incapacity of both the presi¬ 
dent and first vice president and shall 
perform such duties as specified in the 
bylaws or assigned by the president. 

Proposed wording: The second vice 
president shall act for the president in the 
event of the absence or incapacity of the 
president, the president-elect, and the 
first vice president, and shall perform 
such duties as specified in the bylaws or 
assigned by the president. 


Nominees for Computer Society office and Board of Governors 


On the following pages are the posi¬ 
tion statements and biographies of the 
Computer Society’s candidates for presi¬ 
dent-elect, first and second vice presi¬ 
dents, and Board of Governors. Within 
each category, candidates are listed in 
alphabetical order. 


Election of officers to one-year terms 
and of board members to three-year 
terms, each beginning January 1, 1991, 
will be by vote of the membership as 
specified in the bylaws. Ballots, which 
will be mailed to all society members 
about September 1, must be at IEEE 


Headquarters no later than October 12, 
1990. Election results will be announced 
in the December issue of Computer. 

The opinions expressed in the state¬ 
ments are those of the individual candi¬ 
dates and do not necessarily reflect Com¬ 
puter Society positions or policies. 
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Nominees for president-elect 


Bruce D. Shriver 

Position statement. 

Since 1983, the Comput¬ 
er Society has grown by 
33 percent, to over 
106,000 members. During this period, publi¬ 
cations, standards, conferences, and other 
member services have increased greatly in 
size and quality. Unfortunately, this expan¬ 
sion has recently been supported by deficit 
spending, funded from our financial reserves, 
leaving them below what sound business 
practice indicates. 

We are entering a period of belt-tightening 
during which important priorities must be set. 
We must determine which services can grow; 
which can be maintained at current levels, 
curtailed, or eliminated; and which can be ini¬ 
tiated. The publications you read and the con¬ 
ferences you attend will be affected by the 
choices your leaders make. 

The challenge for leaders of the society is 
to simultaneously provide high-quality mem¬ 
bership services and build the reserves back 
to a fiscally sound level. I would work to put 
our resources into real services, not into lev¬ 



els of needless structure and nonfunctioning 
oversight boards. 

I am especially supportive of our efforts in 
standards, magazines, transactions, technical 
committees, and the CS Press. Along with our 
workshops and conferences, they provide a 
critical flow of technical information that is 
the fundamental purpose of our society. I will 
encourage experimentation with new technol¬ 
ogies for the delivery of all of our society and 
IEEE services. 

Additionally, we must stimulate involve¬ 
ment from all members. We are truly an inter¬ 
national society; over 25 percent of our mem¬ 
bers reside in countries outside the United 
States. Vigorous professional and student 
chapters worldwide are essential for our long¬ 
term health. I would work for their revitaliza¬ 
tion, increased technical-committee and edu¬ 
cational activities, and a strong Distinguished 
Visitors Program. 

However, our current revenues cannot sup¬ 
port all of these areas at their current level. 

We must question what is important for us to 
do if we want to keep the society on a solid 
financial footing and ensure its future contri¬ 
butions to our careers. I believe that my expe¬ 
rience in industry and academia over the last 
25 years has prepared me to lead the way in 
finding answers and implementing solutions 
to these issues. 


Biography. Shriver is Computer magazine’s 
editor-in-chief and was the inaugural editor- 
in-chief of IEEE Software. He has served 
three terms on the Board of Governors, was 
chair of the Technical Committee on Compu¬ 
tational Medicine and the TC on Micropro¬ 
gramming, and vice chair of ACM’s SIG on 
Microprogramming. He chairs the IFIP Work¬ 
ing Group 10.1 on architectural systems con¬ 
cepts and characteristics. 

Shriver is vice president for research at the 
University of Southwestern Louisiana. Previ¬ 
ously, he was director of the Pacific Research 
Institute of Information Systems and Manage¬ 
ment and Henry Walker Distinguished Profes¬ 
sor at the University of Hawaii. From 1984 to 
1988, he was department group manager of 
software technology and a research staff mem¬ 
ber at IBM’s T.J. Watson Research Center. 
Shriver was Alfred Lamson Research Profes¬ 
sor in Computer Science at USL from 1973 to 
1984. He has consulted extensively for a num¬ 
ber of firms in the computer industry. 

He has published over 70 technical papers 
and reports, chaired 18 dissertation commit¬ 
tees, been general or program chair of 25 con¬ 
ferences, and has lectured internationally. 

Shriver received his PhD in computer sci¬ 
ence from the State University of New York at 
Buffalo in 1971. He was named an IEEE fel¬ 
low earlier this year. 


Joseph E. Urban 

Position statement. 

The Computer Society is 
in a solid technical lead¬ 
ership role within the 
computing field. Our services such as confer¬ 
ences, publications, standards, and technical 
committees continue to rate highly among 
members. I want the Computer Society to con¬ 
tinue to be technically first-rate in information 
content and timely delivery, while remaining 
fiscally sound. 

My goals are to 

(1) improve the publications area — espe¬ 
cially Computer magazine — by, for example, 
active solicitation of accurate and timely tuto¬ 
rial articles, and by promoting growth through 
the addition of an abstracting publication to 
provide rapid pointers into the current litera- 

(2) increase the society’s technology ad¬ 
vancement and continuing-education mecha¬ 
nisms through an increase in grass roots activ¬ 
ities of chapters, standards working groups, 
and technical committees; 

(3) work toward greater member involve¬ 
ment in formulating international technology 
initiatives in computing research, develop¬ 
ment, and applications; and 



(4) hunt for new ways to enhance society 
benefits by asking the members, through ques¬ 
tionnaires and e-mail, what they see as the 
most important new services needed. 

I will work to ensure that the Computer So¬ 
ciety staff provides increased and better ser¬ 
vice for members through close linkage with 
key volunteer leaders and an improved work¬ 
ing environment. I will promote technical ac¬ 
tivities inside and outside the US through con¬ 
ferences, visiting lecturers, model curricula, 
networks, and society offices. In addition, I 
will work to enhance intersociety activities 
through affiliate agreements, cosponsorship, 
and exchange programs. 

Beyond my strong support for technical ac¬ 
tivities, I believe in maintaining the financial 
health of the society. As treasurer of the Com¬ 
puter Society during the 1986-87 computer in¬ 
dustry slump, I managed the society’s financ¬ 
es and succeeded in building a sound financial 
base. I will continue to watch finances while 
seeing that we provide top-notch services. 

I have a proven track record as a Computer 
Society executive, having been elected to 
serve as the first and second vice president. 

My experience includes the Board of Gover¬ 
nors, the Executive Committee, and the Area 
Activities, Conferences and Tutorials, Publi¬ 
cations, and Technical Activities Boards. I 
welcome your support and ideas to help the 
Computer Society more effectively meet your 


Biography. Urban is a member of the Board of 
Governors, chair of the Awards Committee, 
and a Computer Society representative on the 
IEEE Publications Board. He has served as the 
society’s elected first and second vice presi¬ 
dent, responsible for conferences and tutori¬ 
als, and as treasurer and Finance Committee 
chair. He initiated and chaired the Technical 
Committee on Computer Languages and 
chaired the Publications Planning Committee. 
He chaired and lectured in the Chapter Tutori¬ 
als and Distinguished Visitors Programs. He 
chaired five society conferences and served on 
the Editorial Boards of IEEE Transactions on 
Software Engineering and IEEE Expert. 

Urban is professor of computer science at 
Arizona State University, responsible for the 
Software Engineering Research Group. He 
worked at the University of Miami, the Uni¬ 
versity of Southwestern Louisiana, the US 
Army Signal Center, and the University of 
South Carolina. He has published over 50 
technical papers. His research areas include 
software engineering, computer languages, 
and data engineering. 

He earned a BS from the Florida Institute 
of Technology, an MS from the University of 
Iowa, and a PhD from the University of 
Southwestern Louisiana, all in computer sci¬ 
ence. He received the Computer Society’s 
Meritorious and Distinguished Service 
Awards, a Distinguished Professor Award at 
Southwestern Louisiana, and an ACM Doctor¬ 
al Forum Award. 
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Nominees for first vice president 



Paul L. Borrill 

Position statement. 

The Computer Society 
goes from strength to 
1 strength. This, I believe, 
is due directly to (1) the responsiveness and 
quality of service we provide to meet the 
needs and desires of our members with publi¬ 
cations, conferences, and tutorials, and (2) the 
encouragement we provide for membership 
involvement in our technical and standards ac¬ 
tivities. My interpretation of members’ needs, 
based simply on my own needs as a profes¬ 
sional, indicates that we must provide an envi¬ 
ronment in which to help the industry, contin¬ 
ue our education, and nurture and develop our 


creativity, style, and professionalism in the 
most positive way possible. 

As a great believer in open industry stan¬ 
dards, I am especially interested in continued 
improvement in our standards development 
process. The time has come to match the cele¬ 
brated technical creativity and innovation 
shown so often in our standards activities with 
sound management and administrative princi¬ 
ples, so that we can assure the industry that 
standards can be developed in the IEEE Com¬ 
puter Society as quickly and effectively as the 
industry requires. 

Biography. Borrill is the Computer Society’s 
vice president for standards and a member of 
the Board of Governors. First elected to the 
board as a petition candidate in 1984, he has 
served at all levels: as the society’s first om¬ 
budsman (a function he initiated over his con¬ 
cern for responsiveness to members), as secre¬ 


tary of the Board of Governors, and as chair 
of many standards working groups, including 
the innovative and now highly successful Fu- 
turebus+ Working Group. He also serves as 
the Computer Society’s representative to the 
IEEE Standards Board and is a member of 
Nescom, its New Standards Subcommittee. 

Borrill is director of engineering at Sun Mi¬ 
crosystems in Mountain View, California. He 
received his BSc in physics (with honors) 
from the University of Manchester and his 
PhD in physics from University College Lon¬ 
don. A member of IEEE and ACM, he is a 
chartered engineer (C.Eng.) with the Institu¬ 
tion of Electrical Engineers in the UK. Borrill 
received NASA’s Public Service Group 
Achievement Award and the Computer Soci¬ 
ety’s Meritorious Service and Outstanding 
Contribution Awards. 


Gerald L. Engel 

Position statement. 

The Computer Society is 
in a difficult period that 
raises questions about 
the validity of a number of services and activi¬ 
ties. How well we answer these questions will 
no doubt determine our future. 

Fundamentally, the society is sound, and 
the challenge is to see that services continue at 
an appropriate level of excellence and that 
reasonable and proper growth is achieved. 

This will require careful management of 
scarce resources, expansion of the society’s 
membership base, and effective interaction 
with the IEEE and other organizations. I be¬ 
lieve I am well qualified to carry this out. 

In my current administrative position at the 
University of Connecticut, I have had consid¬ 
erable experience in managing scarce resourc¬ 
es. Through my work with area activities and 
minority institutions, I understand both grass 


roots involvement with the Computer Society 
and the issue of recruitment from underrepre¬ 
sented populations. Over the past 10 years, I 
have worked with a number of organizations 
including the Computing Sciences Accredita¬ 
tion Board, the IEEE, the National Education¬ 
al Computing Conference, AFIPS, and our sis¬ 
ter societies, often in leadership positions, and 
know how to effectively utilize cooperative 
relationships. 

It has been a pleasure to work with the 
Computer Society’s members, staff, and vol¬ 
unteers for the past 12 years, and I eagerly 
look forward to continuing to do so. Though 
current circumstances have caused us to reas¬ 
sess our future, I believe that when we do, we 
will conclude that it is bright and that the 
Computer Society will establish an even better 
leadership position. I will appreciate your sup- 

Biography. Engel is the society’s 1990 vice 
president for area activities. Previously, he 
served for two years as vice president for edu¬ 
cational activities. 

He has also served the Computer Society in 
a variety of other roles. He has worked with 


educational activities since 1978 and was in¬ 
volved with the development of model pro¬ 
gram documents for both computer science 
and engineering. He is working with the task 
force charged with updating these recommen¬ 
dations. He has also served for the past four 
years as a Computer Society representative to 
the Computing Sciences Accreditation Board 
and was the first chair of the Computer Sci¬ 
ence Accreditation Commission. Additionally, 
he has worked with the Publication Board and 
is vice chair of the Conferences and Tutorials 

Engel is on leave from his endowed chair 
of computer science and engineering at the 
University of Connecticut at Stamford and is 
interim director at the university’s Waterbury 
Regional Campus. He was recently honored 
for service as the first chair of the Steering 
Committee for the National Educational Com¬ 
puting Conferences. He chaired the first two 
summer workshops for the Association of De¬ 
partment Heads of Computer Science and En¬ 
gineering at Minority Institutions. 

He holds the D.Ed. degree in computer sci¬ 
ence from Pennsylvania State University. 



Nominees for second vice president 


Mario R. Barbacci 

Position statement. 

The Computer Society is 
a remarkable organiza¬ 
tion in the range and 
quality of services it provides to its members 
and to the profession at large. The society 



sponsors or cosponsors most of the major pro¬ 
fessional meetings in our field; our magazines 
and transactions provide a forum for scholarly 
articles as well as surveys and tutorials; the 
Computer Society Press is one of the largest 
book publishers in the computer field. 

Nevertheless, the quality and quantity of 
these services and products paint only part of 
the picture. The Computer Society is also peo¬ 
ple — the many members who volunteer their 
time, energy, and intellect to further the pro¬ 
fession and, in turn, reap the benefits of tech¬ 


nical growth and development of professional 
peer networks. Our many technical commit¬ 
tees provide opportunities for members to par¬ 
ticipate in important technical activities and to 
grow professionally. These committees con¬ 
sist of researchers, engineers, and practition¬ 
ers in areas ranging from supercomputers to 
microprocessors, from office automation to 
operating systems, from VLSI to distributed 
systems — in short, the entire spectrum of 
computer-related technologies. Unfortunately, 
the opportunities provided by these activities 
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are among our best kept secrets, and this 
should not be so. 

As second vice president of the Computer 
Society, I will continue my past efforts on the 
Technical Activities Board and the Board of 
Governors to increase the visibility of volun¬ 
teer activities, to recognize the value of volun¬ 
teer contributions, and to highlight the oppor¬ 
tunities for professional growth that our 
members can derive by participating in these 
activities. 

Biography. Barbacci, vice president for tech¬ 
nical activities and a member of the Executive 
Committee, is completing his second term on 
the Board of Governors. He has been a mem¬ 
ber of the Long Range Planning Committee, 
vice chair of the Technical Activities Board, 
and editor of the TABS newsletter. Barbacci is 
a senior member of the IEEE and the Comput¬ 
er Society, a member of the ACM and Sigma 
Xi, and member and past chair of IFIP Work¬ 


ing Group 10.2 (computer descriptions and 
tools). 

He is on the staff of the Software Engineer¬ 
ing Institute and the faculty of the School of 
Computer Science, Carnegie Mellon Universi¬ 
ty. His primary research interests are design 
automation, programming languages/environ¬ 
ments, and distributed systems. A founding 
member of the Software Engineering Institute, 
he served from January 1985 to April 1986 as 
its associate director for technology explora- 

Barbacci received BSEE and Engineer de¬ 
grees from the National University of Engi¬ 
neering, Lima, Peru, in 1966 and 1968, re¬ 
spectively, and a PhD in computer science 
from Carnegie Mellon in 1974. He is a recipi¬ 
ent of the IFIPS Silver Core Award (1986), 
the ACM Recognition of Service Award 
(1987), and the Computer Society Certificate 
of Appreciation (1988) and Outstanding Con¬ 
tribution Award (1989). 


Barry W. Johnson 

Position statement. 

The Computer Society’s 
mission is to advance 
the theory, practice, and 
application of computer and information pro¬ 
cessing technology and to promote the ex¬ 
change of technical information among its 
members. To fulfill this mission requires, in 
my opinion, four items: 

(1) excellent sources of technical informa¬ 
tion and innovation, 

(2) varied and high-quality membership ser- 

(3) financial stability, and 

(4) international visibility of our activities. 

Having served as the society’s treasurer, vice 
president for membership and information ac¬ 
tivities, and member of the Conferences and 
Tutorials Board and the Technical Activities 
Board, I feel I have the experience to help the 
society in these four closely coupled areas. 

We must continue to seek new and better 
member services, such as publications, confer¬ 
ences, and standards, that fulfill members’ 
needs. More important, perhaps, is ensuring 
the technical quality of existing programs. By 
working to maintain technical quality and con¬ 
trolled expansion of services, I feel we can 
better serve the membership. 

The Computer Society must also be fiscally 
sound to successfully continue its activities. I 
believe that maintaining a strong financial po¬ 
sition is one of the most important problems 
facing the society. We must plan for the finan¬ 
cial cycles in the computer industry so that we 
can maintain a consistent level of funding for 


our important activities. 

Finally, society activities need international 
visibility, both among the membership and 
within the general profession. I will continue 
to support enhanced promotional efforts for 
recruiting new members, keeping existing 
members, enhancing student activities, and in¬ 
creasing general awareness of society activi¬ 
ties within the computer profession. 

Biography. Johnson, currently vice president 
for membership and information activities, has 
served on the Conferences and Tutorials 
Board, the Technical Activities Board, the 
Membership and Information Board, as chair 
of the Membership Development Committee 
and the Finance Committee, as an associate 
editor of IEEE Micro and IEEE Transactions 
on Computers, and as treasurer. A senior 
member of the IEEE, Johnson also belongs to 
the Industrial Electronics Society, Tau Beta 
Pi, Eta Kappa Nu, and Sigma Xi. 

He is an associate professor of electrical 
engineering and a member of the Center for 
Semicustom Integrated Systems at the Univer¬ 
sity of Virginia. Prior to joining the universi¬ 
ty, he worked for the Government Aerospace 
Systems Division of Harris Corporation. He is 
the author of Design and Analysis of Fault- 
Tolerant Digital Systems from Addison-Wes- 
ley. 

Johnson received BS, ME, and PhD degrees 
in electrical engineering from the University 
of Virginia. He has received several Computer 
Society award certificates, an award for out¬ 
standing contributions from the Virginia 
Chapter of Eta Kappa Nu, an outstanding 
young faculty member award from the Depart¬ 
ment of Electrical Engineering, the 1989 Uni¬ 
versity of Virginia Alumni Association Young 
Teacher Award, and a 1990 Outstanding Fac¬ 
ulty Award from the Virginia State Council of 
Higher Education. 



Board of Governors nominees: 


Position statement. 

My years working with 
the Computer Society 
have been most reward¬ 
ing. This opportunity to contribute even more 
by looking for better ways to achieve the soci¬ 
ety’s goals and to help the membership is a 
challenge I look forward to. 

My background in industry and academia, 
both in North America and Europe, and my 
extensive involvement with professional soci¬ 
eties enable me to bring important skills to my 
Computer Society work. 

If elected, I will concentrate on 

(1) providing effective tools for profession¬ 
al and personal advancement to all members, 

(2) giving continuous and improved support 
to all chapters during their formation and op¬ 
eration, 

(3) encouraging communication between 
chapters, regions, and the society, and 

(4) facilitating the exchange of tools and 
other means for the success of international 
activities. 

I promise that if elected I will strive to em¬ 
ulate the high standards of previous board 
members and to deliver the best possible re¬ 
sults for the society and its membership. 

Biography. Albert-Howard, a senior IEEE 
member since 1979, founded in 1984 the 
Computer Society chapter in Vancouver, BC, 
where chapter membership has now reached 
50 percent of the section membership. After 
three years as chair of the Vancouver Chapter, 
she is now on the Area Activities Board as the 
chair for Region 7. 

Her other IEEE and Computer Society ser¬ 
vice includes CS chapter vice chair (1984-86) 
and chair (1986-88); IEEE Vancouver Section 
treasurer (1988-89), secretary 1989-90, and 
vice chair (1990-91); IEEE Engineering Man¬ 
agement Society Board of Directors (1982- 
84); and CS Area Activities Board, Region 7 
(Canada), vice chair (1988-89) and chair 
(1990-91). 

Director of networking and communica¬ 
tions at the University of British Columbia 
since November 1989, she was previously BC 
Telephone’s manager of network services, re¬ 
sponsible for the T1 Backbone provincial net¬ 
work plan, design, and implementation. She 
also worked for IBM and Olivetti in Europe 
and for Southern California Edison and 
Hughes Aircraft in the US. 

Albert-Howard earned her doctorate at the 
University of Roma, Italy, in statistics applied 
to computer science. She published three tech¬ 
nical books on computer hardware, software, 
and systems analysis. She is a counselor/advi¬ 
sor to students on master’s degree curricula in 
engineering and computer sciences in Califor¬ 
nia and British Columbia. 
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12 candidates; vote for 7 


Joseph Boykin 

Position statement. 

While it may sound 
corny or old fashioned, I 
strongly believe that 
membership in a professional organization is 
part of being a professional. I have worked for 
seven years in various volunteer positions and 
am currently serving as Computer Society 
treasurer. 

As we develop new programs for the 1990s, 
I believe we must work more closely with in¬ 
dustry. Formal liaisons with industry, from the 
local level and beyond, should be established. 

Approximately one quarter of our member¬ 
ship is based outside the United States. We 
must also recognize and foster the internation¬ 
al nature of our organization. 

I will work toward making our organization 
more efficient. New programs important to 
our members will be added, and we will re¬ 
evaluate existing programs that may have ma¬ 
tured to a point where the society no longer 
needs to be involved. 

I look forward to the responsibility and 
challenge of enhancing our organization. 

Biography. Boykin is treasurer for the Com¬ 
puter Society and serves on the Executive 
Committee and the Board of Governors. He 
has held various positions on the Technical 
Activities Board (TAB), including vice chair 
of TAB (1989-present) and chair of the Tech¬ 
nical Committee on Operating Systems (1986- 
1989). The society recently recognized these 
activities by presenting him with the Meritori¬ 
ous Service Award. 

He has been general chair of the first 
(1987) and second (1989) Workshop on 
Workstation Operating Systems. Boykin 
guest-edited the May 1990 special issue of 
Computer magazine on recent developments 
in operating systems. He was one of the 
founders of the PI003 Posix standards effort, 
serving on the working group and the stan¬ 
dard’s executive committee. 

Boykin is manager of Mach Operating Sys¬ 
tem Development with Encore Computer. The 
group is responsible for the transition of Mach 
from a research prototype to a commercial 
project, the use of Mach within DARPA-fund- 
ed research projects, and contract work to the 
Open Software Foundation to parallelize 
OSF/1. He has authored several papers on the 
parallelization of the Mach operating system. 

Boykin holds both an MS in computer sci¬ 
ence and an MA in psychology. His graduate 
work was done at Ohio State and Pennsylva¬ 
nia State Universities. 



Jon T. Butler 

Position statement. 

The challenge facing the 
Computer Society is the 
delivery of services es¬ 
sential to the professional development of its 
members. In the past, these services have in¬ 
cluded magazines, journals, conferences, 
workshops, and standards. Future services will 
also include satellite symposia, videotapes and 
videodiscs, and a magazine especially for stu¬ 
dents. 

I believe that the Computer Society’s con¬ 
tribution requires both new initiatives and an 
adherence to high standards in traditional ser¬ 
vices such as magazines and journals. We 
must nurture emerging technologies with ap¬ 
propriate technical committees, providing 
workshops, conferences, and newsletters. We 
must expand our tutorial series to include ma¬ 
turing fields. 

As a member of the Board of Governors, I 
will devote my energies to these goals, consis¬ 
tent with the prudent use of our resources. 

Biography. Butler has been active in the Com¬ 
puter Society since 1980. He served as chair 
of the Multiple-Valued Logic Technical Com¬ 
mittee, as vice chair for hardware of the Tech¬ 
nical Activities Board, as a member of the 
Distinguished Visitors Program, and on the 
Editorial Boards of IEEE Transactions on 
Computers, Computer magazine, and the 
Computer Society Press. 

Since 1987 he has been a professor in the 
Department of Electrical and Computer Engi¬ 
neering at the Naval Postgraduate School in 
Monterey, California. He has served as the 
Navalex Chair Professor at the Naval Post¬ 
graduate School and on the faculty at North¬ 
western University. He has held summer posi¬ 
tions in various companies, including Bell 
Telephone Laboratories in Naperville, Illinois. 

Butler received a PhD in electrical engi¬ 
neering from Ohio State University in 1973 
and BEE and M.Engr. degrees from Rens¬ 
selaer Polytechnic Institute in 1966 and 1967, 
respectively. He has been awarded the Merito¬ 
rious Service Award and Certificate of Appre¬ 
ciation from the Computer Society, and he re¬ 
ceived the Outstanding Contributed Paper 
Award and the Award for Excellence from the 
Multiple-Valued Logic Technical Committee, 
for technical papers. He has been awarded two 
National Research Council Postdoctoral Asso- 
ciateships and is a fellow of the IEEE. 



Michel Israel 

Position statement. 

I am a Computer Society 
member because I be¬ 
lieve knowledge has an 
intrinsic value. Furthermore, as a professor 
and as a European, I strongly believe that 
knowledge should be shared. This requires a 
coherent organization and a precise idea of the 
goals the Computer Society must set for itself. 
The year 1992 signifies a united Europe. The 
Computer Society must, in my opinion, not 
only consolidate its role but also become an 
intermediary for activities throughout Europe. 
With the changes occurring in Europe, the 
transnational label must be reinforced within 
the Computer Society, and European volun¬ 
teers must be integrated at the decision levels. 
Therefore, several objectives must be dis- 

(1) links between the Computer Society and 
national societies, 

(2) integration of European members for 
discussion and definition of standards, and 

(3) resolving the question of openness to¬ 
ward Eastern European countries. 

To address these issues, the Computer Soci¬ 
ety's European Office in Brussels must be¬ 
come the center for European activities. 

Biography. Israel is the European Activities 
Committee chair and the Region 8 Area Activ¬ 
ities chair. He served as chair of the Multiple- 
Valued Logic Technical Committee for 1987 
and 1988, for which he received a Certificate 
of Appreciation. He also received an Out¬ 
standing Paper Award from the committee. In 
addition, he has been given the Meritorious 
Service Award and the Certificate of Appreci¬ 
ation for chapter activities in Region 8. 

He is a member of the AFCET Board of 
Governors (the largest French society in com¬ 
puter science), chair of the AFCET Design 
Automation Group, and a member of the 
AFCET Computer Science Board. He is on the 
editorial board of TSI (the French equivalent 
of Computer magazine) and the board of the 
French IEEE section. 

A full professor at the IIE-CNAM (an. engi¬ 
neering school in computer sciences), Israel 
teaches computer organization, algorithmics, 
and graphics. He was a visiting professor for a 
year at the Electrical Engineering Department 
of the University of Toronto under a NATO 
scholarship. 

His research interests include multiple-val¬ 
ued-logic circuits and design automation 
tools. He is working on design automation 
tools in conjunction with Philips Laboratories 
and IBM. He holds a Doctor of Science Thesis 
from the University of Paris. 



September 1990 


97 















Charles B. Silio 



Michael C. Mulder 

Position statement. 

I plan to focus my activ¬ 
ities in three areas: pub¬ 
lications, budgeting, and 
international linkages. My goal is to help the 
Computer Society remain a principal, respect¬ 
ed source of timely technical information for 
our profession. This will require focus and dil¬ 
igence in our publications and technical fo¬ 
rums, including the introduction of new ways 
to provide information to our members. In the 
budget area, the society needs to plan better, 
with clear benefit-to-cost analysis done before 
the board makes major financial decisions. 
New ventures must produce usable informa¬ 
tion at low member cost, yet with a high 
enough return to sustain the activity. 

Our profession clearly spans the globe; 
thus, I will carefully look to international ac¬ 
tivities that will benefit our membership and 
lr profession, and are within our budget. I 
will work hard toward these goals. 


Biography. Mulder, a past editor-in-chief of 
Computer, has served as first vice president, 
twice as vice president, three times on the Ex¬ 
ecutive Committee, and four times on the 
Board of Governors. He was vice president for 
education, a distinguished visitor, and a mem¬ 
ber of the Audit Committee and three joint 
ACM/IEEE-CS task forces. 

He was a Computing Sciences Accredita¬ 
tion Board member and team chair for accred¬ 
itation, and an Accreditation Board for Engi¬ 
neering and Technology visitor. He is a senior 
IEEE member, a member of AFIPS Working 
Group 10.1, and a registered professional en¬ 
gineer. The society has awarded him three 
Distinguished Contribution Awards, two Out¬ 
standing Contribution Awards, and two Certif¬ 
icates of Appreciation. 

Mulder is director of the Center for Ad¬ 
vanced Computing Studies at the University 
of Southwestern Louisiana, Alfred Lamson 
Distinguished Research Professor, a professor 
of computer science and engineering, and a 
senior corporate consultant to the Boeing 
Company. He has held advanced development 
and technical management positions in indus¬ 
try and academe. He served as a governor-ap¬ 
pointed member of the Oregon Resource and 
Technology Development Corporation, for 
which he received an outstanding contribution 
award. He earned a PhD from Montana State 
University, an MS from the University of 
Washington, and a BS from Oregon State Uni¬ 
versity. 


Yale N. Patt 

Position statement. 

The Computer Society 
should stand for quality 
in computer engineer¬ 
ing. We do this in part by what we legitimize 
— in matters of curriculum, publications, and 
other educational and technical activities. If 
reelected, I will continue to work in these ar¬ 
eas toward more substance, less form, and no 
marketing hype. I will also continue to ask, 
“How much does it cost?” and “Is it important 
to do?” 



Biography. Patt is a member of the Computer 
Society’s Board of Governors and Computer 
magazine’s Editorial Board. He has worked on 
the technical programs of more than two doz¬ 
en IEEE-affiliated conferences, including 
serving as general chair of Micro-21 and pro¬ 
gram co-chair of ISCA-15. He was guest edi¬ 
tor of the January 1989 special issue of Com¬ 
puter — “Real Machines: Design Choices/ 
Engineering Trade-Offs” — and is guest edi¬ 
tor of the January 1991 special issue on exper¬ 
imental research in computer architecture and 
performance measurement. 

A professor of electrical engineering and 
computer science at the University of Michi¬ 
gan, Ann Arbor, Patt teaches graduate and un¬ 
dergraduate courses in computer architecture 
and directs PhD students in experimental re¬ 
search on the implementation of high-perfor¬ 
mance computer systems. In addition, he has 
consulted extensively in the computer industry 
for more than 25 years, in particular for Digi¬ 
tal Equipment, NCR, and Nexgen. In 1983 he 
cofounded, and for the following five years 
was co-director of, the Berkeley Aquarius 
project, which involved the design of a high- 
performance computing system for handling 
symbolic and numeric computations with the 
same machine. 

Patt received a BS from Northeastern Uni¬ 
versity, and MS and PhD degrees from Stan¬ 
ford University, all in electrical engineering. 


Position statement. 

As a member of the 
Board of Governors, I 
will seek to serve the 
needs of all our members in a fiscally respon¬ 
sible manner, and I will look for new opportu¬ 
nities to provide desired services that foster 
member professional development and the 
communication of new ideas that help us in 
our jobs. The society has done well in recent 
years in trying to satisfy member needs by ini¬ 
tiating new publications and opening regional 
service offices. However, as one who pays his 
own dues and subscription fees, I appreciate 
the need to reduce the costs associated with 
providing these services and will work toward 
that goal. At the same time I will continue to 
work for increased member participation in all 
society activities so that society governance 
accurately reflects the views of the members. 

Biography. Silio has been active in the Com¬ 
puter Society for 15 years, serving as chair of 
several committees and as 1989 treasurer. He 
chaired the Computer Services Advisory, Fi¬ 
nance, East Coast Operations, and Press Advi¬ 
sory Committees, the Technical Committee on 
Multiple-Valued Logic, two arrangements 
committees for Compcon Fall, and was a pro¬ 
gram chair for three International Symposia 
on Multiple-Valued Logic. He served on the 
Compcon Fall Standing and Society Opera¬ 
tions Committees, and the IEEE’s Technical 
Activities Board Finance Committee and Press 
Editorial Board. 

An associate professor of electrical engi¬ 
neering at the University of Maryland, during 
1985-87 Silio was associate department chair 
for graduate studies. He is Maryland’s Com¬ 
puter Society Student Chapter advisor. He has 
been a National Research Council associate in 
operations research at the Naval Postgraduate 
School and has consulted for the Army Mate¬ 
riel Systems Analysis Activity and the Nation¬ 
al Technological University. His work is in 
computer engineering, computer networks, 
and security. 

Silio earned BS, MS, and PhD degrees in 
electrical engineering at the University of 
Notre Dame. He is a member of Eta Kappa 
Nu, Tau Beta Pi, and Sigma Xi, and is a US 
Army Reserve officer. 



COMPUTER 


















Donald E. Thomas 

J Position statement. 

I One of the Computer 
1 Society’s roles is to pro- 
mote worldwide techni¬ 
cal interchange. The society fulfills this role 
through its extensive publishing, conference, 
and standards activities. We must continue to 
upgrade these member services while keeping 
them economical. 

Conferences and publications are a major 
means of transferring technical information. I 
will promote activities supporting topical 
conferences, and promote journals and maga¬ 
zines as reader interest dictates. 

Technical committees represent the grass 
roots efforts of our members developing their 
technical areas. I will promote a better fund¬ 
ing mechanism for these groups. 

The future direction of the Computer Soci¬ 
ety is determined by the volunteers, who, with 
the support of their employers, provide dy¬ 
namic leadership for the society’s activities. 
We must continue to develop a staff that will 
be supportive of this leadership. 


Biography. Thomas chaired the 25th Design 
Automation Conference and served as pro¬ 
gram chair of the 23rd and 24th DACs. He 
served on the Computer Society’s Board of 
Governors during 1989-90. He was a found¬ 
ing editor of IEEE Design and Test and 
served as guest editor of the magazine’s Au¬ 
gust 1984, August 1985, and February 1987 
issues. He is a member of the society’s Tech¬ 
nical Committee on Design Automation and 
of ACM’s SIGDA, as well as an IEEE fellow 
and a member of ACM and Sigma Xi. 

Thomas is a professor of electrical and 
computer engineering at Carnegie Mellon 
University and associate director of the SRC- 
CMU Research Center for Computer-Aided 
Design. While on sabbatical during 1985-86, 
he was a visiting scientist at the IBM T.J. 
Watson Research Center. His research inter¬ 
ests include the automatic design of integrat¬ 
ed circuits and systems, and he has developed 
and demonstrated techniques for synthesizing 
register-transfer-level designs from program¬ 
like behavioral descriptions. He has published 
in numerous journals and conference proceed¬ 
ings. 

Thomas received a PhD in electrical engi¬ 
neering in 1977 from Carnegie Mellon Uni¬ 
versity. He has received several of the soci¬ 
ety’s Meritorious Service Awards as well as 
the IEEE Transactions on Education Out¬ 
standing Paper Award for 1978-79. 



Position statement. 

A professional society 
facilitates development 
and transfer of new insights and technology 
through people, events, and publications. If 
elected, I will address the following concerns: 



Benjamin W. Wah 

Position statement. 

My main service to the 
Computer Society has 
been in publications and 
conferences. If elected, I plan to improve the 
quality and quantity of services within the 
budget guidelines. I will emphasize 


(1) Innovative new services can expand the 
Computer Society’s basis without diluting its 
level of technical knowledge. For example, 
new presentation media may increase access 
to technical information around the globe. 

(2) Today’s students are tomorrow’s com¬ 
puter professionals. I want to use my daily ex¬ 
perience with students to support youth and 
establish programs for early identification of 
our future members and leaders. The Comput¬ 
er Society must keep playing a decisive lead¬ 
ership role in education. 

(3) Expansion and innovation of services 
cannot depend solely on increased member¬ 
ship fees. We must find other means. I pro¬ 
pose investigating alternative sources of fund¬ 
ing (endowments, grants, bequests, 
sponsorships, etc.). Successful innovation 
coupled with fiscal prudence will enable Com¬ 
puter Society members to continue as leaders 
of their profession. 

Biography. Von Mayrhauser first became in¬ 
volved in the Computer Society through the 
Technical Activities Board, serving for two 
years as TAB secretary and now as treasurer. 
She was recently elected chair of the Techni¬ 
cal Committee on Software Engineering. In 
the past she was membership chair and secre¬ 
tary for the Computer Society’s Chicago 
Chapter and was recently a member of the so¬ 
ciety’s Long Range Planning Committee. She 
is chair of the next International Symposium 
on Software Reliability Engineering. She has 
been serving as reviewer of computer science 
programs for the Computer Science Accredita- 

Von Mayrhauser is an associate professor 
and associate chair in the Department of Com¬ 
puter Science at the Illinois Institute of Tech¬ 
nology, where she has been since 1980. She 
also works in industry and on selective con¬ 
sulting projects. She appeared several times as 
an expert witness for the US District Court. 
Recently, Academic Press published her book 
Software Engineering Methods and Manage¬ 
ment Mayrhauser received a Dipl. Inf. from 
the University of Karlsruhe (1976) and a PhD 
from Duke University (1979). 


(1) Improving the quality and timeliness of 
publications. We need to automate the pro¬ 
cess, including paper reviewing, electronic 
submission, and computerized word process¬ 
ing. Automation will significantly reduce the 
backlog and the cost of operations. 

(2) Increasing student membership. Stu¬ 
dents are the society’s future and need to be 
recruited when they start their careers. We 
need to improve student chapter activities and 
the Distinguished Visitors Program, and en¬ 
courage publication of student papers. 

(3) Maintaining the society’s financial 
health. Examining the budgeting process from 
a global view will enable us to continue our 
many useful services. 

I have actively participated in these areas 
and would be honored to work with other 
board members to strengthen and expand cur¬ 
rent policies and programs. 

Biography. Wah, a member of the Board of 
Governors and the Publications Board, is a 
founding associate editor-in-chief of IEEE 
Transactions on Knowledge and Data Engi¬ 
neering. He is a senior member of the IEEE 
and a distinguished visitor for the Computer 
Society. He has served as program chair for 
the International Conference on Parallel Pro¬ 
cessing, the International Conference on Dis¬ 
tributed Computing Systems, the International 
Conference on Tools for Artificial Intelli¬ 
gence, and the International Conference on 
Data Engineering, for which he was also con¬ 
ference chair in 1987. 

Wah has been guest editor for seven special 
issues of Computer magazine and several 
IEEE transactions, and editor of IEEE Trans¬ 
actions on Software Engineering and the VLSI 
Technical Bulletin. He is a visitor for both the 
Accreditation Board for Engineering and 
Technology and the Computer Science Ac¬ 
creditation Commission. 

A professor of electrical and computer en¬ 
gineering and a university scholar of the Uni¬ 
versity of Illinois at Urbana-Champaign, Wah 
previously served on the faculty of Purdue 
University and as a program director for the 
National Science Foundation. 

Wah received his BSc and MSc in electrical 
engineering from Columbia University and 
MS and PhD degrees in computer science 
from the University of California, Berkeley. 
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Ronald Waxman 

Position statement. 

As a current member of 
the Computer Society’s 
Board of Governors, I 
have sought ways to increase technical vitality 
within the society. On the Technical Activities 
Board, I have proposed an approach to techni¬ 
cal committee funding that will foster an en¬ 
trepreneurial spirit in the committee leaders. 
This should result in the incorporation of new 
and innovative technical initiatives to benefit 
society members. I will keep working to pro¬ 
vide a base upon which computer profession¬ 
als will wish to exercise their technical leader¬ 
ship within the Computer Society. 

In my experience with the Computer Soci¬ 



ety standards activities, and more recently as 
chair of the Technical Committee on Design 
Automation, I found that direct involvement is 
quite stimulating. I will continue to encourage 
active technical participation by professionals 
and promote exciting new membership activi- 


Biography. Waxman is chair of the Technical 
Committee on Design Automation, editor of 
IEEE Design & Test’s news department, an 
active member of various Computer Society 
boards, and represents the society on the IEEE 
New Opportunities in Standards and New 
Technology Directions Committees. 

He founded the Design Automation Stan¬ 
dards Subcommittee (DASS) and has repre¬ 
sented the Computer Society on the IEEE 
New Standards Committee and the Atlas (test 
language) Committee. He has also organized 
and chaired technical functions. 


A principal scientist at the University of 
Virginia’s Center for Semicustom Integrated 
Systems since 1987, Waxman conducts re¬ 
search in the design of digital systems. He 
also consults. Previously at IBM for 32 years 
in technical and management capacities, he 
attained the position of senior engineer and 
received awards for technical achievement. 
There he guided the development of VHDL (a 
hardware description language), which under 
his DASS leadership became an IEEE stan¬ 
dard. He has numerous patents and publica- 

Waxman is an IEEE fellow and a member 
of the ACM, IF1P WG 10.2, Sigma Xi, Eta 
Kappa Nu, and Phi Eta Sigma. He earned a 
BSEE from the New Jersey Institute of Tech¬ 
nology and an MEE from Syracuse Universi¬ 
ty. He received a Computer Society Meritori¬ 
ous Service Award and was a distinguished 
visitor for the society. 



During my four years’ service with the Board 
of Governors, until 1989,1 worked to estab¬ 
lish the Computer Society's Asian Office and 
affiliate relationships with major Japanese so¬ 
cieties. With improved direct member services 
by the Asian Office, the membership of Region 
10 has grown to over 9,000. To further pro¬ 
mote our international activities, I propose to 

(1) encourage the submission of papers and 
special-issue proposals on research and devel¬ 


opment in Asia, 

(2) strengthen the relationship between the 
activities of the Technical Activities Board 
and the various area activities throughout the 
world, and 

(3) enhance cooperation with the technical 
committees of affiliate societies in Asia to ex¬ 
change technical activity information. 

If elected to the Board of Governors, I will 
promote these objectives. 

Biography. Yamada, currently chair of the 
Computer Society’s Asian Activities Commit¬ 
tee, served on the Board of Governors during 
1986-89. He was IEEE Design & Test maga¬ 
zine’s international editor for the Far East and 
guest editor of the October 1985 issue, “De¬ 
sign and Test in Japan,” and the October 1989 
issue, “Design and Test in Asia.” He is Far 
East representative for the executive commit¬ 
tees of the Computer Society’s Technical 
Committee on Design Automation and ACM’s 


SIGDA. He also served on the Board of Direc¬ 
tors of the Information Processing Society of 
Japan (IPSJ) for two years, until May 1990, 
and chaired IPSJ SIGDA during 1981-84. 

As chief engineer for the Information Pro¬ 
cessing Group of NEC, Yamada is in charge 
of planning CAD/CAE development. Previ¬ 
ously, he managed the CAD Engineering De¬ 
partment of the Computer Engineering Divi¬ 
sion, and the CAE Systems Department of the 
EDP Manufacturing Systems Division of 
NEC. 

Yamada received a BS in 1959 and a doc¬ 
torate in engineering in 1980, both from Osa¬ 
ka University, Osaka, Japan. He is a member 
of IEEE, ACM, IPSJ, and the Institute of 
Electronic, Information, and Communication 
Engineers of Japan. He received an Outstand¬ 
ing Contribution Award from the Computer 
Society in May 1989. 


IEEE Computer Society Election 

Return your ballot promptly. 

Ballots must be received at IEEE Headquarters no later than October 12, 1990. 
Election results will be announced in the December issue of Computer. 
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Symposium on Solid Modeling Foundations 
and CAD/CAM Applications 


June 5-7, 1991 Radisson Plaza, Austin, Texas Sponsored by ACM/SIGGRAPH 


The primary objective of this symposium is to provide a forum for 
the exchange of research results both in the applications of 
solid modeling to CAD/CAM, and in the underlying algorithms, 
data structures, and software engineering methodologies of solid 
modeling systems. Possible topics include: 


General Chair 
Joshua Turner, RPI 

Program Chair 

Jaroslaw Rossignac, IBM 

Exhibits Chair 

Peter Brown, NIST 

Conference Coordinator 

Mary Johnson, RPI 

Program Committee 

George Allen, McDonnell Douglas 
Pere Brunet, U. Poli. Catalunya 
Alan de Pennington, U. Leeds 
John Dixon, U. Mass 
Richard Fridshal, General Dynamics 
David Gossard, MIT 
Mark Henderson, ASU 
Christoph Hoffmann, Purdue 
Frederik Jansen, Delft U. Tech. 

Martti Mantyla, Helsinki U. Tech. 

James Miller, U. Kansas 

Michael Pratt, Cranfield 

Aristides Requicha, USC 

Wolfgang Strasser, Eberhard-Karls U. 

Herbert Voelcker, Cornell 

Peter Wilson, RPI 

John Woodwark, IBM UK 

Tony Woo, U. Michigan 

Michael Wozny, RPI 


geometric and topological domain 
representation conversion 
blends, sweeps, offsets 
algorithmic complexity 
robustness and model validity 
geometric reasoning 
interference detection 
hardware support 
techniques for user interaction 


Jaroslaw Rossignac 
IBM Research, J2-C03 
P. O. Box 704 

Yorktown Heights, N. Y. 10598 


feature-based modeling 
constraint-based design 
parametric design 
assembly modeling 
product modeling 
product data exchange 
tolerance modeling/analysis 
part and assembly planning 
manufacturing simulation 


Papers will be carefully reviewed. Proceedings of accepted papers 
will be available at the time of the conference. To contribute, 
please e-mail or send an abstract (150-300 words) by 
October 15,1990, then submit five copies of the full paper 
(6000 words or less) by November 30,1990, to: 


Notice of acceptance and reviewers’s comments will be given by 
January 22, 1991, with camera-ready papers due by March 1, 1991 


Phone: 914-784-7630 
Fax: 914-784-7455 
e-mail: jarek@ibm.com 


Advance program: (ready March 15, 1991) to receive a copy, please complete the following information, 
and send to Mary Johnson, RDRC, CII 7015, RPI, Troy, NY, 12180-3590. Fax: 518-276-2702 
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PRODUCT REVIEWS 


Editor: Richard Eckhouse, UMASS-Boston, Harbor Campus, Boston, MA 02125, Compmaik, r.eckhouse; Bitnet, eckhouse@umbsky; CompuServe, 70516,556 


Looking through Windows products 


This issue we look at a number of prod¬ 
ucts for the Windows graphical user in¬ 
terface. All of them have been upgraded 
to run under version 3.0 of Windows, al¬ 
though for the sake of a timely review we 


did not necessarily test the upgraded ver¬ 
sions. What we did was to find products, 
typical of what the average user would 
own, that take advantage of the Windows 
environment. We did not review Win¬ 


dows 3.0 itself because it is reviewed in 
IEEE Software (July 1990). We will cov¬ 
er additional Windows products in future 
issues, since PC users and vendors appear 
to be heading in that direction. 


Improving the Windows user interface 


When I last reported on HDC’s Win¬ 
dows products (Mar. 1989, p. 88; Aug. 
1988, p. 85; Nov. 1989, p. 84), the prod¬ 
ucts were for version 2.1 of Microsoft 
Windows. Given the poor interface of 
Windows’ MS-DOS Executive, it was al¬ 
most mandatory to use some alternative. 

I tried and liked Windows Express be¬ 
cause it made moving between applica¬ 
tions easy and fast, using a hierarchy of 
folders that held applications. The pro¬ 
gram associated icons with the folders 
and applications to graphically depict the 
actions that resulted from clicking on a 
given icon. 

The introduction of Windows 3.0 
brought program and file managers to 
support the desktop metaphor that Win¬ 
dows was designed to emulate. A few of 
my colleagues immediately said that 
companies like HDC would soon be out 
of business. After all, everything you 
needed was right there in the latest and 
greatest version of Windows. Well, I 
tried to use Windows 3.0 and like it, but 
that metaphor gives me a rather cluttered 
desktop that doesn’t fit my organization¬ 
al style. 

Windows Express 

I have a large collection of files in a 
significant number of DOS subdirecto¬ 
ries. These files represent letters and pa¬ 
pers, mailing list, grant budgets, tele¬ 
phone and “to do” lists, C and Pascal 
programs, my company’s accounting 
records, etc. I need these files organized 
by activity (programming, financial, 
word processing, CAD, etc.) in such a 
way that I can figuratively say, “Activate 
Excel with my current budget proposal 
displayed.” I thought about doing this 


with Windows’ file and program manag¬ 
ers, but they work differently; either I 
can see a tree structure that lets me click 
on a file to activate its corresponding 
program, or I can activate a program and 
then use it to select the file I want to 
manipulate. 

Windows Express 3.0 takes another 
approach. It organizes itself so that when 
I open a folder, I find either applications 
or more folders inside. If I find a folder, 

I simply repeat the process. If I find a 
program, then I can set things up so that 
selecting the program gives me a list of 
files to be started with it. That’s the way 
I see things on the computer, and that’s 
why I really like Windows Express. 

At the top level there is a master folder 
that looks exactly like a file folder. This 
new version of Windows Express lets 
you have more than one master folder, 
although only one can be active at a 
time. The title bar of the display shows 
the master folder’s name and three com¬ 
mands: File, Special, and Help. This top 
level also lists more folders or applica¬ 
tions to be executed. Interestingly, you 
can make one of the folders a new master 
folder so you can switch between master 
folders. 

I’ve pretty much described the func¬ 
tionality of Windows Express in my ear¬ 
lier reviews, so I’ll focus here on the new 
or improved features. For instance, while 
the earlier version offered on-line help, it 
was not as extensive as it is now and did 
not feature the context sensitivity that 
comes with the latest release, of Win¬ 
dows. Also, the previous version did not 
graphically represent the file folders, al¬ 
though it did have icons, selection keys, 
names, and descriptions. 

A separate program, the Windows Ex¬ 
press Editor, lets you customize your 


system. The information in the dialogue 
box that accompanies each folder or ap¬ 
plication is pretty much the same as be¬ 
fore, with two notable exceptions: the 
icon editor contains many more multicol¬ 
or icons that you can customize with 
many more colors, and you get two sepa¬ 
rate windows when you turn on an appli¬ 
cation’s file prompt — one for the files 
and one for the directories — making it 
much easier to move from directory to 
directory. 

Windows 3.0 introduced the concept 
of groups, and Windows Express sup¬ 
ports them. This means if you start with 
a bare bones Windows Program Manager 
and migrate to Windows Express, you 
can pick up and merge your earlier work 
so that you haven’t lost anything. Of 
course, if you have an earlier version of 
Windows Express, you can convert those 
folders and applications to the current 
version. You can also convert all your 
old icons, but after you’ve seen the col¬ 
orful set in 3.0, you won’t want to con¬ 
tinue using the older set. Another nice 
touch is that the Windows Express Editor 
lets you take the default icon from any 
Windows application and either use it as 
is or “colorize” it to make it stand out. 
But if the application has no default icon 
and you don’t care for the set that Win¬ 
dows Express offers, you can make up 
your own. And, like the master folder, you 
can have any number of icon libraries. 

You can use the preferences command 
to customize such features as the date 
and time, a screen saver, icon display, 
key selection and folder/applications de¬ 
scriptions, icon and text sizes, whether 
Windows Express is maximized or mini¬ 
mized, and password protection for both 
Windows Express and the editor. The ed¬ 
itor has two other features that are really 


102 


COMPUTER 












handy. First, it can read Program Manag¬ 
er .grp files and convert them to Win¬ 
dows Express folder or application items. 
Second, since the editor is object orient¬ 
ed, you can drag files from the File Man¬ 
ager to the Windows Express folder to 
install an application automatically! 

Another new feature is that you can 
launch multiple applications. A sample 
that comes with Windows Express opens 
a calendar, a “to do” list, and the Win¬ 
dows clock. Some new variables — 
%drive, %dir, and %file — can be in¬ 
cluded with the file prompt, so that when 
the application command is “xcopy %file 
c:\backup\%file,” the file you selected 
during the file prompt will be inserted 
for the %file placeholder. Environment 
variable can be used as well, adding ad¬ 
ditional functionality. HDC also includes 
a “windows enhancer” that offers three- 
dimensional command buttons, windows 
that “explode” as they are opened and 
closed, and additional shadowing. These 
options and others can be enabled (or 
disabled) in the hdc.ini file. 

You can make Windows Express the 
shell that comes up when you start Win¬ 
dows, instead of the Program Manager. 
You can cause specific applications to be 
launched at startup, as well. This changes 
the Windows environment slightly, so 
that you leave Windows when you exit 
Windows Express. It also adds a new op¬ 
tion to the Help command offering you 
system information (the Windows ver¬ 
sion, its mode, the amount of memory 
available, and the display resolution and 
number of colors). You can also assign 
function keys F2 through F9 as quick 
keys, and you can bring up a small box 
to remind you how you assigned them. 

The software comes with two manuals: 
a smaller one that covers Windows Ex¬ 
press and another that goes into the Win¬ 
dows Express Editor. Each is complete 
and thorough, but probably necessary 
only if you want to learn all the details of 
this excellent package. As with previous 
versions, installation is automatic and 
painless, with the software prompting 
you for choices. 

Windows Express and Windows Ex¬ 


press Editor sell for $99,95 and are sup¬ 
plied on both 5.25-inch and 3.5-inch 
floppies. The company’s address is HDC 
Computer Corporation, 6742 185th Ave. 
NE, Redmond, WA 98052, phone (206) 
885-5550. This application is still my 
first choice of what to buy after you pur¬ 
chase Windows. 

Reader Service 21 

First Apps 

In addition to Windows Express, 
HDC’s First Apps is a set of pop-up utili¬ 
ties you can call from any Windows ap¬ 
plication. Included micro applications or 
“Micro Apps” are the Alarm Clock, Art 
Gallery, Auto Save, Character Set, Desk¬ 
top, Font Viewer, Memory Viewer, Sys¬ 
tem Enhancer, Work Set Organizer, and 
a video game called Rocks. As with oth¬ 
er HDC software, installation is automat¬ 
ic, with the user answering questions 
about which Micro Apps to install and 
where. Once installed, the user can in¬ 
voke First Apps either through the Micro 
Apps Manager menu or by clicking on 
the “HDC” that replaces the Control 
menu in every application window. 

The Micro Apps Manager supplements 
the Control menu and includes two addi¬ 
tional menus to select a particular micro 
application and to customize how you 
work with the micro applications. A full 
set of on-line help windows is useful if 
you choose not to read the excellent us¬ 
er’s manual. Either way, you will find 
that these Micro Apps can help you from 
within any Windows application. For ex¬ 
ample, if you need to know how the sys¬ 
tem’s memory is being used, you can call 
up the “About” window from Windows, 
or you can use the Micro Apps Memory 
Viewer to really see where each piece of 
code is in memory. Auto Save is really 
handy for those applications that don’t 
have a similar function built in. Work 
Sets is useful when you want to start a 
bunch of related applications, and the Art 
Gallery is helpful when compiling graph¬ 
ics from different applications. Again, 


I’ve explained much of this before (Mar. 
1990, pp. 95-96), so I’ll turn my atten¬ 
tion to what’s new. 

The Alarm Clock has been expanded 
to include any number of alarms, and 
you can customize the message for each 
alarm as well as the alarm signal. You 
can also link the alarm with appoint¬ 
ments made in the Windows Calendar. 

The Art Gallery is really a graphic 
clipboard where you store thumbnail ren¬ 
ditions of either bitmapped or metafile 
images. HDC supplies a number of imag¬ 
es to get you started. 

The Character Set is a nice feature that 
lets you cut a special character, like the 
copyright symbol, from this micro appli¬ 
cation and paste it into your word proces¬ 
sor without having to remember what key 
combinations are needed to generate it. 

The big change in the Desktop appli¬ 
cation is the ability to use special effects 
in the display background. For instance, 
you can use a functional calendar for the 
background so that clicking on specific 
dates lets you enter a calendar note or set 
an appointment using Windows Calen¬ 
dar. You can also create an animated 
background made up of a series of 
frames created in Windows Paintbrush or 
the like. Fractal patterns are also offered. 
Finally, if you disable the screen save 
that comes with Windows Express, you 
can display one of three patterns — in¬ 
cluding polygons, rocks, or a bitmap cre¬ 
ated in Paintbrush — when there is no 
activity for a minute or more. 

There are several other Micro Apps, 
but the one that remains high on my list 
is the Memory Manager. The current ver¬ 
sion runs in any of Windows’ three 
modes and graphically shows how Win¬ 
dows is using the total memory, includ¬ 
ing the swap space. Thus, at a glance you 
know how both DOS and Windows ap¬ 
plications fill the space allocated to both 
extended and disk memory. There are a 
lot of Micro Apps to appeal to different 
categories of users, and this $99.95 utili¬ 
ty is sure to find much favor. — Richard 
Eckhouse 

Reader Service 22 


A Window onto your data 


Windows Filer 3.03 and Q+E version 
2.1.11 are two low-cost database packag¬ 
es that run under Windows 2.x. The first 
is a forms-oriented package from Palantir 
Software that retails for $195.99. It dis¬ 
plays one record out of a dBase II or III 
database and can also display pictures, 
with the file name containing the picture 
stored as a field in the database. The sec¬ 


ond package is from Pioneer Software 
and retails for $149.95. It supports dBase 
II, III, or IV databases, with each record 
displayed on a line across the window 
and multiple records displayed on multi¬ 
ple lines. Q+E allows you to open sever¬ 
al databases at once, each in its own win¬ 
dow, or to join databases for display in a 
single window. You can also link data¬ 


bases to Microsoft Excel files and launch 
Q+E from Excel’s menu bar. 

System requirements. Windows Filer 
requires 512K of memory and Windows 
2.03. A hard disk is also recommended. 
The standard distribution disk is a 5.25- 
inch 360K floppy. The Q+E manual 
states only that Windows/286, 386, or 
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the runtime version that comes with 
Microsoft Excel is required. My distribu¬ 
tion disk was a 5.25-inch 1.2M floppy. 
However, the standard distribution disk 
is a 5.25-inch 360K floppy, or you can 
request a 3.5-inch 720K floppy. 

I also tested both products in Windows 
3.0’s real and standard modes without 
any problems. Later versions are now 
available; they are not significantly 
changed except that they will run in all 
modes of Windows 3.0. 

Manual. The Windows Filer manual 
starts off with such basics as what files, 
records, and fields are. It then goes into a 
four-lesson tutorial, which is good but 
would be more helpful with lessons in 
export/import, picture-field creation, and 
searching. The reference section de¬ 
scribes all the menu options in detail. 
Unfortunately, the details are not accu¬ 
rate, since there are several inconsisten¬ 
cies between the manual descriptions and 
the actual program. The System menu 
discussed in the manual seems to be the 
one from Windows 1.0, there are a cou¬ 
ple of differences between the document¬ 
ed and actual File menu, and the Edit 
menu documentation lists the wrong key¬ 
board sequence for paste (Insert instead 
of the Windows-standard Shift-Insert). 
None of these differences caused me any 
real trouble, but they did not give me a 
very good feeling about the product, ei¬ 
ther. 

The Q+E manual contains a fairly de¬ 
tailed table of contents and index, and it 
accurately reflects the program with no 
discrepancies. The examples do not cov¬ 
er all aspects of the system, but they pro¬ 
vide a good starting point. Also, the data 
files on the distribution disk allowed me 
to duplicate the examples for practice. 

Installation. You install Windows Fil¬ 
er by a batch file that merely copies the 
filer.exe file and demo database from the 
distribution disk to the directory you 
specify. The batch file does not copy the 
filerlib.exe and win87em.exe files, which 
are needed for execution. Windows Filer 
does not have an entry in Windows’ 
win.ini file. 

Installing Q+E is more involved but no 
more difficult. A setup program asks for 
the directory into which everything will 
be installed and whether it should install 
the update or read-only version. At the 
end of installation it asks if Q+E should 
be launched automatically when Excel is 
launched. When installation is complete 
the setup program displays a message 
telling you to change your path environ¬ 
ment variable to include the Q+E direc¬ 
tory. It also shows an example of your 
current path with the Q+E directory ap¬ 
pended to it. 


Windows Filer displays 
each database record in a 
form of up to 300 lines. 
Form creation is very 
simple but not very 
powerful. 


The Q+E section in the win.ini file is 
optional, and you can add it only by edit¬ 
ing win.ini itself. The section lets you 
control the typeface and point size that 
Q+E will use (Q+E supports only non¬ 
proportional fonts, such as Courier). 

You can also use the win.ini file to 
control whether SQL statements will be 
compatible with dBase or ANSI. There 
are some significant differences between 
the two. For instance, when you select 
Last_Name = “S,” dBase will return all 
records with a Last_Name that begins 
with “S,” while ANSI will return only 
Last_Names that are exactly equal to 
“S.” Also, if ANSI is selected, fields that 
are all spaces are treated as null values. 
This affects how records will be sorted 
based on those fields as well as how they 
are selected and used in expressions and 
aggregate functions like count and total. 
The wildcards in a “like” clause can also 
be the standard SQL wildcards (“%” for 
any sequence of characters and for a 
single character) or the DOS wildcards 
(“*” and “?”). 

Another feature in the Q+E win.ini 
section lets the program read dBase files 
created using the ANSI character set. 
Q+E will not read such files correctly 
unless you modify the win.ini file be¬ 
cause Q+E uses the OEM character set. 
You can also control the amount of buff¬ 
er space that Q+E allocates. The vendor 
recommends increasing the buffer space 
if you frequently use index files (doing lots 
of joins) or open a lot of data files at once. 

Windows Filer features and func¬ 
tions. Windows Filer displays each data¬ 
base record in a form of up to 300 lines. 
Form creation is very simple but not very 
powerful. Text is just typed on the 
screen, and fields are delimited by the [ 
and ] characters. A one-character field is 
indicated by [, while a two-character 
field is []. Windows Filer does not sup¬ 
port dBase III memo fields, so fields that 
would normally span multiple lines must 
be defined as multiple single-line fields. 
This can use a lot of space, since dBase 
file format stores all fields at their maxi¬ 
mum length. Directives placed in the 
form definition control the field data 


type (date, logical, number, picture, or 
character) and field attributes (hidden, 
read only, right justified, and size). You 
can also create a field value by combin¬ 
ing other fields with four-function arith¬ 
metic. Creating a form creates an empty 
database file, making it difficult to create 
a form for an existing database. 

You add records by choosing the Add 
option from the Record menu, and use 
the Update or Change options to update 
records. Change lets you change the field 
values in the current record, while Up¬ 
date lets you change a series of records, 
one after another. There is no way to 
make global changes such as changing 
all area codes or increasing all salaries 
by 10 percent. 

The Record menu also lets you display 
a specific record by specifying its record 
number or by entering search criteria. 

The criteria can be Equal, Unequal, 
Above, Below, Not Below, Not Above, 
Anything, and Empty. There is also a 
scroll box to select the field that the con¬ 
dition will apply to and an edit box to en¬ 
ter the value. Putting an asterisk at the 
end of the value lets you match prefixes. 
Conditions can be combined via ANDs 
and ORs. Once you have specified the 
search criteria you need to select the next 
record to actually apply them. If no 
records meet the criteria, Windows Filer 
displays the last record in the database 
without displaying an error message. 

You can also use the Record menu’s 
Select Fields option to select fields and 
delete or restore records. Selecting only 
certain fields makes updates and changes 
go faster by restricting the cursor to 
those fields. Delete will delete the cur¬ 
rent record, while Restore undeletes a 
deleted record. Deleted records are dis¬ 
played with a () around their record 
number. To actually remove the deleted 
records from the database you must ex¬ 
port and then import the data. 

Windows Filer supports dBase II and 
III NDX index files, but they are not up¬ 
dated when the database is updated. To 
maintain an index, an NDX file must be 
opened and updated after the database is 
updated. 

The Organize menu contains options 
for sorting, importing, and exporting the 
database records. When Sort is chosen, 
the current record becomes a sort tem¬ 
plate. You select a field and whether to 
sort in ascending or descending order. 

The selected field’s current value is re¬ 
placed with its sort number and filled 
with > characters for ascending order or 
< characters for descending order. Sort¬ 
ing the records actually rewrites the data¬ 
base. 

Windows Filer can import five differ¬ 
ent types of files: dBase III, dBase II, 
standard data format, delimited text, and 
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Windows Filer 2.0 format. The manual 
does not define standard data format or 
delimited text format. By defining a 
record selection criteria before importing 
a file, you can make the import function 
skip any records that do not meet the cri¬ 
teria. You can also export a subset of the 
database records by selecting the subset 
with the Record Select option. 

The Special menu has options that do 
not fit neatly into any of the other menu 
categories. The Create Window option 
triggers a very useful feature. It creates a 
pop-up window that can display the cur¬ 
rent record in the main window or anoth¬ 
er specific record, so two records can be 
displayed at once. You can create multi¬ 
ple windows, each with a different 
record. The number of windows is limit¬ 
ed only by available memory. I created 
10 windows onto the demo database 
without any problems. You can resize 
and scroll the windows both horizontally 
and vertically. Using the Special menu 
you can also display deleted records. In 
this case, the Delete option on the 
Record menu becomes Restore so that 
you can undelete deleted records. 

You control Windows Filer reports 
with a report form containing a fairly 
wide range of directives. You can define 
headers, footers, page size, and left-mar- 
gin indentation. You can include the cur¬ 
rent date, page number, and record num¬ 
ber. You can also include calculations 
based on field values, include totals and 
subtotals, trim trailing spaces from char¬ 
acter fields, extract a character range 
from the middle of a character field, and 
concatenate two character fields together. 
A report can also include comparisons so 
that only a subset of the data is included. 

You determine the placement of head¬ 
ers, fields, footers, page numbers, etc. by 
putting a “field_name” string in the re¬ 
port form file. There are also directives 
for forcing a new page, pausing after 
each page, and a very useful directive for 
printing dummy pages. This lets you 
align the paper before actually printing 
the data. You can also send the report to 
a file or just display it on the screen. 
Windows Filer displays a “percentage 
done” indicator while building the report. 

Q+E features and functions. Q+E 

can have any number of databases open 
at the same time (I routinely had three 
databases open). Each database is dis¬ 
played in its own database window with¬ 
in the Q+E application window. You can 
resize, move, and overlap the database 
windows, and they generally behave just 
as application windows behave on the 
overall screen. 

Q+E supports dBase II and III NDX 
index files and dBase IV MDX index 
files. You must explicitly open NDX 


Q+E can only display 
one memo field per 
database at a time, 
but it can display memo 
fields from different 
databases at the same time. 


files via the Open Index option on the 
File menu. MDX files open automatical¬ 
ly when you open the database file. Open 
index files are automatically updated 
when you change the database. Un¬ 
opened index files are not updated and 
must be rebuilt after the database 
changes. 

When you first open a database, the 
columns are displayed in the order in 
which they are defined in the database. 
Memo columns are displayed as 10-char¬ 
acter fields that are blank if there is no 
memo value or that contain the word 
“memo” if there is one. Double-clicking 
on the column then pops up a 12x65- 
character window in which you can see 
and edit the memo (which is limited to 
10 Kbytes). You cannot resize the win¬ 
dow, although you can move it anywhere 
on the screen — even outside the bounds 
of the Q+E application window. Q+E can 
only display one memo field per data¬ 
base at a time, but it can display memo 
fields from different databases at the 
same time. 

Using the Layout menu, you can 
change the order in which the columns 
are displayed or even remove columns. 
You can later restore a removed column. 
You can also apply aggregate functions 
to the columns. Three functions — mini¬ 
mum, maximum, and count — can be ap¬ 
plied to all column types except memos. 
The average and total functions can also 
be applied to numeric columns. Q+E dis¬ 
plays the results of these functions after 
all the records, or you can choose to dis¬ 
play just the function results. Like re¬ 
moving a column, if you choose to show 
only the function results you can later 
choose to show both records and func¬ 
tion results. Changing the layout has no 
effect on the underlying database. 

The options on the Select menu con¬ 
trol which database records are dis¬ 
played. To create a condition you select a 
column and then choose the Add Condi¬ 
tion option from the Select menu. This 
brings up a dialogue box with eight con¬ 
ditions: Equal, Not Equal, Greater Than, 
Greater Than or Equal To, Less Than, 
Less Than or Equal To, Like, and Not 
Like. The default condition is Equal, and 


the value is the value you clicked on to 
select the column. Values can be expres¬ 
sions and can include other columns. For 
character columns you also get a case- 
sensitive box. You add this new condi¬ 
tion to any previously defined conditions 
with AND or OR operators (Conditions 
are applied left to right). However, you 
cannot group the conditions with paren¬ 
thesis. 

Another option lets you join two data¬ 
bases. One-to-one and one-to-many joins 
are done automatically but are always 
equi-joins. You can join multiple data¬ 
bases, the number being limited by the 
number of files that can be open simulta¬ 
neously. There are also options to dis¬ 
play the current set of conditions and 
joins and to reset the conditions. There is 
no way via the menus to remove just one 
conditions or to edit a condition. The Se¬ 
lect menu also contains lets you control 
the display of deleted records. 

The final option on the Select menu 
lets you display the Structured Query 
Language query. Any menu option that 
changes how or which records are dis¬ 
played changes the SQL query. For in¬ 
stance, the Layout menu changes the or¬ 
der of the field names in the “select” 
clause, the functions add “compute” 
clauses, and the search options add 
“where” clauses. I was disappointed that 
Q+E lets you use the SQL functions only 
in the “where” clause and use the aggre¬ 
gates only in a “compute” clause (unlike 
standard SQL, which lets you use func¬ 
tions and aggregates in an SQL query’s 
“select” clause). SQL queries can also be 
saved in query files. 

Once you have all the records you are 
looking for, you can sort them in any or¬ 
der by selecting an element in a column 
and then choosing the Ascending or De¬ 
scending option in the Sort menu. The 
first column selected is the primary sort 
field, the next is the secondary, and so 
on. The Sort menu also lets you see and 
reset the sort order, but you cannot 
change just one column’s direction or re¬ 
move a column via the menu. Like Layout 
and Select, Sort modifies the SQL query. 

If you want to find a specific record in 
the set of displayed records (instead of in 
the whole database) you can select a col¬ 
umn and then choose the Find option 
from the Search menu. The search is not 
case sensitive, and you can enter just part 
of a string — there’s no need for wild 
card characters. Other options on the 
Search menu let you search for the next 
or previous occurrence of the string. You 
can also go directly to a specific record 
number (the number of the displayed 
record, not the actual record in the data¬ 
base). You have to be sure you have se¬ 
lected the correct column before search¬ 
ing, since only that one column is 
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searched. A major restriction is that you 
cannot search memos. Also, all searching 
starts from record 1, not from your cur¬ 
rent record position. 

You can save query results to a text 
file, a mailing label file, or a new dBase 
II, III, or IV database. For text files you 
can specify page width, lines per page, 
and whether to include the column names 
and row numbers. This is the closest 
Q+E comes to a report. Mailing label 
files are set up as a mailing label with se¬ 
lected fields on different lines. Each line 
can contain several fields from the data¬ 
base and can also contain constant text 
that is not from the database. You can 
also send query results directly to a 
printer. 

When you first open a database, Q+E 
opens it in read-only mode. To update 
any fields you must choose the Allow 
Editing option from the Edit menu. There 
is no obvious way to open a database in 
Allow Editing mode, but if you open a 
database, choose Allow Editing, and then 
save the SQL query, it will contain an 
Allow Editing option clause. Then, if 
you open the query and not the database. 
Allow Editing will be chosen automati¬ 
cally. I found no reference to the options 
clause in the manual, and the clause does 
not appear when the SQL query is dis¬ 
played via the SQL Query option in the 
Select menu. 

Once you have chosen Allow Editing, 
updating the database is easy: Just select 
a field and start to type. Q+E checks typ¬ 
ing and reports errors in a very under¬ 
standable manner, and it updates the da¬ 
tabase whenever you leave the field. You 
edit a memo by popping up the memo 
window and typing. The only memo edit¬ 
ing functions are automatic word wrap; 
delete character (via the backspace and 
delete keys); copy, cut, and paste to and 
from the clipboard; and character posi¬ 
tioning via the cursor control keys, 
mouse, and vertical scroll bar. 

You can change the value in a field in 
multiple rows by selecting the rows and 
then choosing the Update All option 
from the Edit menu. All fields are given 
the same value, but you cannot, say, in¬ 
crease each field value by 10 percent. 
Deleting a record involves only selecting 
a field in the record and then choosing 
Delete Record from the Edit menu. If 
you select multiple records they will all 
be deleted. Deleted records are not really 
deleted, and can be viewed by choosing 
Select Deleted Records from the Select 
menu. After that, you can undelete them. 
To actually delete the records, you must 
pack the database file. 

Adding records is also easy. The Edit 
menu has an option for creating an empty 
record. After choosing that option, you 
just update the fields with their new val- 


I found creating a new 
database/form in Windows 
Filer confusing, and 
there was no on-line help 
system to clear up my 
confusion. 


ues. Also, when you are on the last col¬ 
umn of the last record, pressing the tab 
or return key creates a new record and 
selects its first field so that you can up¬ 
date it. Any date fields in the new record 
automatically get the current date, but 
you can change them to any date you 
need. If you are displaying a joined data¬ 
base you can update fields, but you can¬ 
not add new records or delete records. 

The Edit menu options are Cut, Copy, 
Paste, Undo, Copy Special, and Show 
Memo. Cut, Copy, and Paste are the 
standard Windows clipboard functions 
and use the standard keyboard shortcuts. 
Undo will' undo the most recent opera¬ 
tion. It can restore the value of a field 
that has been incorrectly changed, even 
if you have left the field — as long you 
haven’t changed any other field since. 
Copy Special is used with Excel, and 
Show Memo will show a memo field. 
While Allow Editing is on, Q+E does not 
update the results of aggregate functions 
or resort or reselect the records. These 
operations are reapplied when editing is 
disallowed. 

Creating a dBase II, III, or IV database 
is straightforward. You enter a field 
name, type, width, and (for numeric and 
float data types) the number of digits to 
the right of the decimal point. When the 
type column is selected, Q+E displays a 
pop-up window of all the data types and 
lets you choose one by pointing and 
clicking with the mouse or by entering 
the first letter of the type’s name. Types 
are character, numeric, date, logical, 
memo, and float. 

You can also create dBase II and III 
NDX index files or dBase IV MDX files. 
Index values can be simple column val¬ 
ues, or you can apply several functions to 
the column value to create the index val¬ 
ue. You can concatenate two character 
fields or use just a portion of a character 
field. You can also remove trailing or 
leading spaces or convert the column 
value to all lowercase or all uppercase. 

In addition, you can apply several date 
functions and combine numeric fields 
with the arithmetic operators +, -, *, and/. 

Once you have defined a database you 
can add or delete columns and change 


their width or data type, even if the data¬ 
base already has data in it. Data in any 
column that is no longer compatible with 
the new definition will be lost, but com¬ 
patible data will be converted and re¬ 
tained in the database. 

Problems. I found creating a new da¬ 
tabase/form in Windows Filer confusing, 
and there was no on-line help system to 
clear up my confusion. You start by 
choosing Open from the File menu, typ¬ 
ing the new name, and clicking the Edit 
button. In edit mode you press the return 
and space keys to create new lines and 
spaces on the form. You cannot use the 
arrow keys to move to the right or down 
until the space has been created via the 
return and space keys. You can use the 
mouse to position the cursor within the 
created space but not to create space. 
There is no visible distinction between 
created space and background, so you 
have to keep track yourself of the right¬ 
most space of each line and the bottom¬ 
most line. 

Since creating the form creates the da¬ 
tabase, it’s difficult to create a form for 
an existing database. However, you can 
do it by renaming the existing database, 
creating a form and new database with 
the existing database’s original name, de¬ 
leting the new database, and giving the 
first database its original name again. 

I had no difficultly creating a data¬ 
base/form, but I had several problems ed¬ 
iting them. The manual states that once 
the database contains data, you can 
change the form layout but you cannot 
add or remove fields. However, when I 
tried to save the new database/form I got 
an alert box saying that the database al¬ 
ready existed and that I should select a 
new name. I could not cancel out of the 
alert box, effectively causing Windows 
Filer but not other applications to hang. I 
had this problem even when the database 
was empty. 

I also had problems searching the data¬ 
base. I could do simple searches involv¬ 
ing only one or two clauses, but I had a 
terrible time doing complex searches. 
Importing data also proved frustrating. I 
discovered two things when I tried to im¬ 
port a dBase III file containing my ad¬ 
dress book data. First, Windows Filer’s 
import function is smart enough to auto¬ 
matically match up the field names and 
import the dBase fields that correspond 
to the Windows Filer data fields. Second, 
there is no way to tell Windows Filer to 
import dBase field X into Windows Filer 
field Y. I also tried to import a text file 
and discovered that Windows Filer can¬ 
not import comma-delimited text. The 
dialogue box to define the delimiter ac¬ 
cepts all nonalphanumeric characters on 
the keyboard except commas. Also, the 
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delimiters must both precede and follow 
each field and be separated from each 
other by a space. I discovered all this by 
extensive experimentation, since the 
technical-support person I spoke with 
wasn’t sure what the formats were. 

Finally, I found several other features 
irritating. First, when adding, updating, 
or changing records, the current field is 
highlighted using the screen background 
color, while the text is black. I have cho¬ 
sen a dark blue background for Win¬ 
dows, which made the text very difficult 
to read. There is no way to make Win¬ 
dows Filer use a different color. 

Second, the Cancel, OK Add, Update, 
Change, and many other controls are not 
options on the menu bar, but are buttons 
on a status line at the top of the Windows 
Filer window. This line also indicates 
how many records there are and displays 
“percent completed” statistics for various 
operations. Unfortunately, these buttons 
can be clipped when you reduce the 
width of the window. The horizontal 
scroll bar that appears when the window 
is narrower than the displayed form does 
not scroll the status line. This means 
there is a minimum useful width for the 
Windows Filer window regardless of the 
width of the displayed form. On my sys¬ 
tem, the window must be about 7/8 of the 
screen width for me to be able to click 
the rightmost button. 

Finally, the Cut, Copy, and Paste op¬ 
tions on the Edit menu are not active un¬ 
til you are adding or updating records. 
This means you cannot copy values from 
the form and into the clipboard when just 
reading the database. To copy values I 
had to choose Change mode first, which 
was not only an extra step but opened up 
the possibility of accidently changing the 
database. 

I had no difficultly learning how to use 
Q+E. The manual contains a series of ex¬ 
amples that comprise a very good tutori¬ 
al. The on-line help really wasn’t much 
help, but then I really didn’t need it. The 
help system is not context sensitive. In¬ 


stead, it provides an index of topics de¬ 
rived from the menu options. It describes 
these options adequately, but provides no 
help for general “how do I” questions. 

In general, I found the system easy to 
use but not very robust when it comes to 
errors. I experienced several system hang 
ups when Q+E hit an unexpected error. 
First, I got an “index error” because a 
file allocation error had corrupted the in¬ 
dex file. I am sure that Q+E did not 
cause the allocation error, but it required 
a reboot to get my system back. I also 
experienced a hang up when I tried to ex¬ 
ecute an invalid SQL expression that I 
had typed in, and I had another hang up 
when I forgot to put quotes around some 
constant text in a mailing label. 

When I rebooted my system, I discov¬ 
ered that all my memo field updates for 
the day were lost. It turns out that the 
Q+E version I was using does not update 
the memo file after leaving the memo 
field the same way that it updates the da¬ 
tabase file. The next release corrects this; 
Pioneer sent me a new qe.exe file (ver¬ 
sion 2.1.15) that corrected the problem. 

Q+E also has its share of irritating fea¬ 
tures. The worst is the use of shift-space 
to select the current field when editing 
text in a character field. It seemed that 
whenever I typed an uppercase letter fol¬ 
lowed by a space, I ended up with a 
shift-space. The next character I typed 
was then inserted at the beginning of the 
field instead of at the end. This forced me 
to pause after typing any uppercase word. 

Q+E’s only major omission is the lack 
of any way to import ASCII or other for¬ 
matted files. However, Pioneer told me 
this will be corrected in a future version. 

Support. The Windows Filer manual 
and on-line help files provide no phone 
number for technical support. I finally 
just called the information number from 
Palentir’s sales brochure (it’s not toll 
free). The phone was always answered 
quickly, and I never spent a significant 
time on hold. However, I got the impres¬ 


A CAD program using the Windows environment 


I have to admit I am an avid Windows 
user. I find Windows’ convenience and 
style much to my liking. As a result I am 
always looking for Windows applications 
that can replace the DOS versions I am 
using. An excellent example of an intelli¬ 
gent marriage between a graphical appli¬ 
cation and Windows’ graphical user in¬ 
terface is Drafix’ Windows CAD from 
Foresight Resources. 

First, you have a familiar and consis¬ 
tent user interface. Having learned Win¬ 


dows maneuvers, icons, menus, and con¬ 
trol buttons, you will have no trouble us¬ 
ing Windows CAD. Second, installation 
of Windows CAD is really easy and fast 
because there are no device drivers to in¬ 
stall, only the applications software it¬ 
self. Third, the ability to change the un¬ 
derlying hardware, such as the graphics 
adapter and the printing or plotting de¬ 
vices, offers flexibility to users that nor¬ 
mally isn’t built into stand-alone CAD 
systems. Lastly, the graphical user inter¬ 


sion that the technical support people 
were not always sure of their answers. In 
many cases they simply took a report, 
with no follow up to provide a way 
around the problem or an indication that 
a new release would fix the problem. 
Several times they said they would call 
me back and never did. 

I also had problems finding Pioneer’s 
phone number. It turns out it’s on the 
distribution disk (which I never looked at 
after installation) and on the back cover 
of the manual. I found Pioneer’s support 
of Q+E to be very good. I never spent 
much time on hold, and my questions 
were always answered accurately and, 
for the most part, quickly. The few times 
they said they would get back to me, they 
did. My only complaint is that their tech¬ 
nical support line is not an 800 number. 

Summary. Despite the problems, most 
of my day-to-day work with both sys¬ 
tems was trouble free. However, Win¬ 
dows Filer lacked some features I need, 
such as the ability to display and join 
multiple databases, support for memo 
fields, and automatic updating of index¬ 
es. The features that distinguish Win¬ 
dows Filer from Q+E — the ability to 
display forms and pictures — are not fea¬ 
tures I require. On the other hand, I 
found Q+E’s functionality very com¬ 
plete. With the exception of importing 
ASCII files, I could do everything I 
needed to do in Q+E. Given Q+E’s supe¬ 
rior technical support, I have converted 
by database applications to Q+E and plan 
to use it as my database system of choice. 

Windows Filer is from Palentir Soft¬ 
ware, Inc, 4455 South Padre Island 
Drive, Suite 43, Corpus Christi, TX 
78411, phone (512) 854-8787. Q+E is 
available from Pioneer Software, 5540 
Centerview Drive, Suite 324, Raleigh, 

NC 27606, phone (919) 859-2220. — 
Noah Davids 

Windows Filer: Reader Service 23 
Q+E: Reader Service 24 


face lets you put nearly everything on 
screen all the time, so you never have to 
memorize a command. In addition to the 
indications on the menus, Windows 
CAD’s status area shows your current 
choices. 

The status area at the bottom of the 
display screen is another special feature. 
This area contains three lines called the 
Action, Message, and Data lines and 12 
buttons that operate either as pop-up lists 
or in full dialogue mode. The status area 
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shows the current command sequence 
(such as Draw -> Line -> Single), current 
cursor position, mouse button prompts, 
snap mode, pen color, and line type. The 
buttons include Zoom In/Out, Oops, and 
Redraw. Here again, Windows CAD 
takes advantage of the interface by open¬ 
ing a separate pop-up window that offers 
simple word processing for entering text. 

Configuration and installation. The 

software is supplied on both 5.25-inch 
and 3.5-inch disks. Installation is auto¬ 
mated and painless, since there aren’t a 
lot of choice to be made — you made 
those when you installed Windows itself. 
Although installation does not modify 
the Windows’ win.ini file, you can open 
it using any text editor to specify default 
paths, background color, fast view controls, 
a startup macro file name, and so on. 

System requirements are a 286- or 
(preferably) 386-based machine with 1 
Mbyte or more memory, a hard disk, and 
a Windows-supported mouse. A math 
coprocessor is strongly recommended. 
The one surprise is the price: $695. It’s 
true that this is a full-featured, low- 
priced CAD system, compared to the 
$3,000 or more you’ll pay for high-end 
systems. But the competition at this level 
typically sells for less than $595, and 
those vendors also have to create large 
libraries of device drivers. However, the 
premium for Windows CAD is well 
worth it. This powerful CAD system is a 
pleasure to work with. 

The basic system. As do all Windows 
applications, Windows CAD has a menu 
bar containing the major system func¬ 
tions; in this case, they are File, Edit, 
Draw, View, Inquire, and Help. File is 
similar to what you would find in other 
Window apps, with the exception of the 
Merge option that combines two drawing 
files. Edit commands include Erase, 
Move, Copy, Trim, Convert, Vertices, 
Attribute, Point Marker, Text, Dimen¬ 
sion, Object, Symbol, Database, Macro, 
and Setup. I’ll explain some of these lat¬ 
er. Draw commands include Point, Line, 
Polyline, Arc, Circle, Text, Polygon, 
Curve, Object, and Dimension. View 
commands include Redraws, Limits, Ex¬ 
tents, Last, Zoom, Recall, Save, and Set¬ 
up. I’ve changed some of the commands 
above to plurals, since some of them 
have multiple forms. Thus, you can re¬ 
draw the active window or all windows. 
Finally, the Inquire commands include 
Entity, Database, Symbol Count, High¬ 
light, Coordinate, Distance, Angle, Area/ 
Perimeter, Disk Space, Extents, Totals, 
and Setup. I’ll assume you know what a 
typical CAD program does, so that many 
of these commands are familiar to you. 

An interesting feature of Windows 


The premium for 
Windows CAD is well 
worth it. This powerful 
CAD system is a pleasure 
to work with. 


CAD is the menu structure. When you 
click on the Edit menu and pick one of 
the subcommands (such as Trim), the se¬ 
lected command appears on the menu bar 
to the right of the Edit command after a 
This new menu item then contains 
a further submenu of “Edit -> Trim” 
commands that include Break, Channel, 
Edge, Divide, Corner, Chamfer, Fillet, 
and Setup. The Draw command works 
the same way. The result is an unclut¬ 
tered menu structure. 

Windows CAD offers all the drawing 
features you’d expect in a higher priced 
package plus one or two more, including 
single, double, parallel, tangent, and per¬ 
pendicular lines; arcs and circles; el¬ 
lipses, polygons, and polylines; curves 
and splines; point markers; and freehand 
sketching. The editing commands let you 
stretch, shorten, fillet, chamfer, trim, 
drag, copy, move, mirror, rotate, and 
align objects. 

Snap modes are important as well. 
Windows CAD provides 13, including 
grid point, endpoint, midpoint, tangent, 
center point, absolute, and relative. Fast 
keys let you type a single letter to change 
the snap mode while in the middle of a 
command, so you can draw a line from 
the center of one line at one end to the 
endpoint of a second line at the other 
end. Fast keys also set cursor direction 
locks, and you can switch from unlocked 
to vertical, horizontal, both, or normal 
(such as perpendicular) mode. 

An Oops command lets you undo the 
effect of an Erase or Trim command. Un¬ 
fortunately you can’t undo other com¬ 
mands, so you should save your work of¬ 
ten. In fact, it’s a good idea to turn on 
backups in the Windows CAD section of 
the win.ini file to make sure you have 
something to turn back to. 

Dimensioning is an important part of a 
CAD system and Windows CAD in¬ 
cludes a large choice of dimensions, in¬ 
cluding horizontal, vertical, rotated, and 
aligned. Dimensions are linear or angular 
using either fractions or decimals. And a 
good CAD system like Windows CAD 
lets you set all the characteristics of a di¬ 
mension, from the type of arrow or the 
text size to the inclusion of prefix and 


suffix information including tolerancing. 
Windows CAD also offers associative di¬ 
mensioning, a feature that some higher 
priced CAD systems lack. 

Since you are working with a scaled 
drawing, Windows CAD lets you auto¬ 
matically calculate the length, perimeter, 
and area of objects using an attribute sys¬ 
tem that describes each object. In Win¬ 
dows CAD, you can attach up to 60 dis- 
playable attributes to each drawing 
entity. These attributes can then be used 
for scaling calculations plus anything 
else you want to add, such as pricing or 
other information that could be used later 
to make up a bill of materials. This last 
task is aided by Windows CAD’s data¬ 
base system, which includes information 
on system variables, attributes, entities, 
and symbol definition. The information 
can be exported for use in dBase or Ex¬ 
cel using both comma-delimited fields or 
standard data format. 

Windows CAD also provides file com¬ 
patibility with Micrografix Designer and 
AutoCAD via drawing exchange files. In 
addition, it support the Drafix Graphic 
Language, a C-like macro language. 
Thus, like several other Windows apps, 
Windows CAD lets you capture and 
playback often-repeated command se¬ 
quences. Several sample macros are pro¬ 
vided to get you started, including one 
that adds new items to the menu bar. 

Windows CAD supports 256 layers, 
eight colors, and nine line types. Nine¬ 
teen fonts add real pizazz to your draw¬ 
ings. My review package also included a 
very useful set of symbol libraries. While 
its 400 symbols might not seem like a 
lot, the actual number is quite a bit larg¬ 
er, since each symbol can be rotated to 
eight positions. The symbols are very in¬ 
tricate, indicating that a lot of work went 
into their creation. You can preview, an¬ 
notate, and edit each symbol and save it 
in a library. Additional libraries are 
available from Foresight Resources. 

Other features include 15 crosshatch 
patterns and 64 solid fill colors. The abil¬ 
ity to name layers and views is another 
nice touch that results in a much more in¬ 
tuitive system. And viewports are one 
feature that should be part of every CAD 
system. Using the “split bar” (part of the 
scroll bar), you can divide the screen in 
half both vertically and horizontally, re¬ 
sulting in one, two, or four views of the 
same object, each with its own scroll 
bars and zoom capabilities. You can then 
zoom in on an object, modify it, and see 
the results in all the other viewports. 

Once you get used to this feature you’ll 
wonder how you got along without it. Fi¬ 
nally, values maintained in Windows 
CAD are accurate to six or seven decimal 
places, with double precision used for all 
calculations 


108 


COMPUTER 









Documentation. Windows CAD comes 
with two manuals, an introduction/tutori¬ 
al and a technical reference manual, each 
in its own binder. While the tutorial can’t 
cover Windows CAD’s large number of 
features, it does an excellent job of fa¬ 
miliarizing the new user with the system. 
Sufficient tutorial drawings are included 
so that the user can either carry out the 
entire exercise or jump to the next one by 
loading the appropriate drawing for that 
part. The last chap-ter lets you put to¬ 
gether a simple floorplan. It made me 
feel confident that I could tackle much 
larger problems. Both the introduction/ 
tutorial and the reference manual have a 
table of contents and an index. 

The reference manual covers each of 
the menu items and explains the system’s 
complete operation. The appendixes cov¬ 
er file conversion, customizing the sys¬ 
tem for Windows, macro language de¬ 
tails, and a keyboard command 


A Genius of a 486 


If you’re like me, you must be won¬ 
dering if it’s time to consider a 486 ma¬ 
chine. After all, there has been plenty of 
time for the manufacturing process to 
settle out any early problems, and prices 
will remain fairly steady for a while until 
volume production forces them down to 
the next plateau. So the question is, what 
do you get for your money? To make an 
evaluation, I contacted PC Genius to try 
out their 25-MHz 486. The machine has 
4 Mbytes of RAM on a Micronics 
motherboard and includes a Microcoplis 
161-Mbyte ESDI drive with a Western 
Digital controller, 3.5-inch Sony and 
5.25-inch Toshiba floppy drives, a Dia¬ 
mond Flower I/O board, an ATI Wonder 
VGA card with built-in mouse port, an 
Omnikey 102 keyboard, and a 220-watt 
Silencer power supply, all mounted in a 
standard AT desktop cabinet. 

My first impression was that this ma¬ 
chine looks and feels like my older 386- 
20 from PC Genius. It runs a little quiet¬ 
er and the feel of the keyboard is a lot 
nicer, but it’s hard to tell if it’s running 
applications faster. This isn’t surprising, 
since most of the time I’m running de¬ 
mand-driven programs, that is, they de¬ 
mand input from me. Since I work in 
seconds, not nanoseconds, the programs 
are always waiting on me. 

But I wanted to know more about this 
486 machine, particularly since in the 
process of reviewing it I upgraded my 
20-MHz 386 to a 33-MHz machine. Both 


summary. There could be more examples 
of the different CAD functions, but the 
brief manual is otherwise complete. 

Complaints. There were a few things 
in Windows CAD I’d like to see 
changed. You now must use the right 
mouse button to cancel a command be¬ 
fore selecting a new one. I’d prefer to 
use the escape key for this. The system 
also lacks useful help messages when 
you enter an incorrect sequence; you get 
a beep, but no reason for it. Also, you 
can’t back up individual steps in the 
command level chain, so you must start 
over again if you make a mistake in the 
command sequence. Other systems let 
you cancel the last step using the escape. 
Finally, printing is slow — very slow. 

Interestingly, I started out using the 
system with my Windows display driver 
set for 800x600 resolution. The system 
worked fine, but I had to run it at a lower 


machines come from PC Genius, both 
use a Micronics motherboard, and both 
feature a cache, although the 486 cache 
is part of the chip rather than external 
like for the 386-33. So it seemed a fair 
comparison to put each though its paces 
to see who came out in front. Since the 
premium for a 486-25 over a 386-33 isn’t 
all that great (about 17 percent more), 
the question is simply whether you get a 
better deal by paying more. 

My tests indicated that the 486-25 of¬ 
fers a 1.67 speed improvement in the 
Dhrystone and Whetstone benchmark 
tests I ran (there was about a +/- 5 per¬ 
cent variation between benchmarks). In¬ 
deed, the floating-point intensive FFT 
(both forward and back) produced the 
same impressive results. So the 486-25 
was consistently faster when measuring 
instruction mixes consisting of fixed and 
floating-point calculations. Since the 
486, with its integral floating-point pro¬ 
cessor, is supposed to be faster, I sepa¬ 
rately tested the unit using just floating¬ 
point instructions. This time the 486-25 
was twice as fast as the 386-33 with its 
separate numeric coprocessor. Clearly, if 
speed is the justification for price, then 
the 486’s speed it is more than enough to 
warrant its purchase. 

I also made some measurements on the 
Micropolis disk because it features the 
higher speed ESDI interface and a slight¬ 
ly better seek time than the Seagate 4096 
in my 386-33. Again, the benchmarks re¬ 


resolution because my eyes weren’t good 
enough to read the “fine print.” Here’s 
where Windows 3.0’s improved setup 
comes in handy: By running Windows’ 
setup command, I was able to change the 
resolution to 640x480 rapidly and with¬ 
out having to reload Windows CAD. 

Conclusions. Windows CAD is an 
ideal system for me. It offers the features 
and functionality of higher priced CAD 
packages and the familiarity, conve¬ 
nience, and flexibility of a Windows ap¬ 
plication. It’s easy to learn and use, and 
it offers features that make it a powerful 
tool not only for mechanical drawings 
but also for electrical and architectural 
work. Foresight Resources Corporation 
is at 10725 Ambassador Drive, Kansas 
City, MO 64153, phone (816) 891-1040 
or (800) 231-8574. — Richard Eckhouse 

Reader Service 25 


vealed an impressive difference, with the 
disk on the 486-25 taking 38.62 seconds 
to complete my series of tests, while the 
386-33 took 71.48 seconds. Of course, 
the differences here and in the CPU 
speed tests only matter if you have 
disk- or CPU-intensive programs. For 
CAD users or others wanting to take 
advantage of a graphical interface (such 
as in Windows and Windows applica¬ 
tions), this speed difference is impor¬ 
tant. 

So much for performance. How do I 
rate this new machine? At $7,525 list (as 
configured above without a VGA moni¬ 
tor), this is not the least expensive 486 
machine you can buy. But one thing that 
I have consistently received from PC Ge¬ 
nius is service. When I have a question, 
they are there to answer it. The one time 
I had a memory chip failure, they fixed it 
in one day. The upgrade of my system 
from a 386-25 to a 386-33 took only two 
days. My friends who have also bought 
from the company relate similar experi¬ 
ences. So they rate very highly as a com¬ 
pany, and I continue to recommend them. 

The components that make up a PC 
Genius machine are first rate. Micronics 
is a well-known board supplier and the 
BIOS manufacturer, Phoenix, has a good 
reputation, as well. There is no separate 
memory board in the 486-25, so you gain 
an extra slot and can add inexpensive 
SIMMs when you want to expand the 
memory to its full 16-Mbyte capacity. 
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Also, you can expand the cache size sim¬ 
ply by installing a set of static RAMs to 
gain as much as 256 Kbytes of secondary 
cache memory. 

The machine was delivered to me with 
the user manuals from Micronics, ATI, 
Diamond Flower (for the DIO-500 Multi- 
I/O card), and the spec sheets from West¬ 
ern Digital and Micropolis as well as PC 
Genius’ check-out sheet. Micronics in¬ 


cludes a full set of system utilities for 
setting the processor speed, mapping 
ROM to RAM, and using the 486’s mem¬ 
ory management unit to provide EMS 
memory. The inclusion of a check-out 
system, called QAPlus, is a nice touch 
that lets you test and diagnose your new 
machine. 

As a reviewer, I am often asked to rec¬ 
ommend a vendor to a friend. I am happy 


to say that no one to whom I have recom¬ 
mended PC Genius has ever been unhap¬ 
py with my suggestion. I rank PC Genius 
at the top of my list. You can reach the 
company at PC Genius, Inc., 800 West 
Cummings Park, Suite 1950, Woburn, 
MA 01801, phone (617) 933-8442. 

— R. Eckhouse 
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Sound Blaster: Plug it in, turn it up 


As the line between PCs and Macs 
blurs even more with the release of Win¬ 
dows 3.0, one glaring difference remains 
between the two: sound capabilities. 
While Macintoshes were designed with 
an emphasis on powerful internal sound, 
the PC world (with some exceptions, such 
as Tandy) largely ignored audio. Yet 
more and more users, from game players 
and MIDI users to large software devel¬ 
opers, are becoming aware of the dramat¬ 
ic difference speech and music can make 
in a well-integrated application. Creative 
Labs has introduced a board to provide 
superior digitized sound for an AT bus 
machine: the Sound Blaster. 

The Sound Blaster is a card packed 
with functions: 11 Adlib-compatible FM 
voices, 12 Game Blaster-compatible 
voices, and one digitized voice channel 
for speech. On top of these 24 sound 
channels. Creative Labs adds lots of nice 
extras that normally are not part of a 
sound card: a joystick port, a MIDI port, 
a 4-watt on-board stereo amplifier, and 
input and output jacks for speakers/head¬ 
phones and a microphone. These features 
all simplify the integration of the Sound 
Blaster into your computer. 

Installing the Sound Blaster is straight¬ 
forward. The 8-bit full-length card re¬ 
quires one XT or AT slot and is jumper- 
configurable for several I/O addresses 
and interrupts. Once I installed the board, 

I was anxious to skip the manual and im¬ 
mediately produce some sounds other 
than the usual “beep” of my PC’s internal 
speaker. The Sound Blaster comes with a 
1/8-inch plug-to-dual RCA jack cable, 
which let me connect the card directly to 
my stereo without any other hardware. I 
fired up my copy of 688 Attack Sub, 
chose Adlib sound, and waited ... I was 
hit with a powerful, movie score-like ste¬ 
reo explosion that amazed me! 

Anyone who uses software that drives 
an internal PC speaker knows how much 
imagination it takes to think of the 


monotone sounds as music. If the Sound 
Blaster is your first experience with a 
sound board, you will be shocked. It ob¬ 
viously depends on the software driving 
the board, but some amazingly high- 
quality music can come out of applica¬ 
tions that never seemed to do much with 
music (such as any Sierra Online game). 
Clearly, entertainment software offers 
the most support for high-quality sound, 
but that will change as programmers in 
other application areas understand what 
they can do with such a resource. 

The Sound Blaster comes with fairly 
uninspired demo software, which I didn’t 
feel showed off the board’s capabilities 
very well. One is an “intelligent organ” 
that will harmonize with your keyboard- 
based piano input. Another demo lets 
you record and playback speech through 
the one speech channel. The quality of 
the recorded sound varies depending on 
which compression algorithm you 
choose: the demo provides four levels of 
compression and a variable sampling rate 
from 5 to 15 KHz. You can create some 
interesting effects by varying the rate 
and compression of a sampled sound. 

The third piece of demo software is more 
inspired: a “talking parrot” that mimics 
your speech input and endlessly hassles 
you in your own words. However, I 
would have liked a more-integrated 
graphics and music demo to show off all 
of the Sound Blaster’s features at once. 

Technically, the board has its own 
DMA controller to go directly to system 
memory for its data. This means you can 
set up the board to run itself off a given 
block of memory and then forget about 
it. The board will output the sound on its 
own without bogging down the CPU to 
get its data. This is a nice feature that 
will let future applications combine high¬ 
speed graphics and sound without sacri¬ 
ficing performance. When you add the 
fact that all 24 channels can be output si¬ 
multaneously to the speakers, the Sound 


Blaster has much more potential that 
simply emulating current products. Imag¬ 
ine having an application that uses 11 FM 
channels, 12 CMS channels, and speech all 
at once; this is where the Sound Blaster’s 
true power lies. 

The MIDI port has its limitations, 
though. On top of the Sound Blaster’s 
list price of $239.95, you need a $49.95 
MIDI connector box to plug the board 
into another MIDI device. Only the most 
basic MIDI software is supplied, and all 
it does is mimic the keyboard organ. 
Thus, you will need additional software 
to use the board in true MIDI fashion. 
One thoughtful feature, however, is that 
while the MIDI connector box plugs into 
the game port, it duplicates the game port 
so that you can still use it along with 
your MIDI device. 

The documentation is adequate, al¬ 
though very light on programming refer¬ 
ence material. Given the lackluster 
demos, you really have to turn to an ap¬ 
plication written for an Adlib or Game 
Blaster card to discover the quality of the 
board. I encountered no compatibility 
problems running any Adlib software. 

Most non-game fanatics would think 
twice about spending over $200 on a 
sound board. I can’t blame them. How¬ 
ever, if applications are developed that 
can use the Sound Blaster’s functionality 
for nonentertainment purposes (such as 
for a talking alarm or phone-dialing soft¬ 
ware), the Sound Blaster could quickly 
become an inseparable part of your sys¬ 
tem. It is clearly one of the leading sound 
boards on the market. And if you are a 
dedicated game player, you won’t want 
to go another day without this board in 
your machine. Sound Blaster is distribut¬ 
ed by Brown-Waugh Publishing, 16795 
Lark Ave., Suite 210, Los Gatos, CA 
95030, phone (408) 395-3838. — D. 

Noah Eckhouse 
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NEW PRODUCTS 


Contact or send releases to Steve Wilcox, Computer, 10662 Los Vaqueros Circle, Los Alamitos, CA 90720; Compmail II, s.wilcox 


HP introduces its most powerful desktop PC 


Stardent updates AVS, 
announces add-on 

Stardent Computer says the latest ver¬ 
sion of its Application Visualization Sys¬ 
tem, AVS3, features new data anaylsis 
capabilities, improved support for appli¬ 
cations development, and heterogeneous 
network support. AVS is an interactive 
visualization environment designed to let 
scientists and researchers construct visu¬ 
alization applications incorporating their 
own computational code. 

AVS3 features a new Graph Viewer 
for generating and manipulating x and y 
plots and graphs and allowing the user to 
do 2D plotting and contouring. The new 
version also offers Data Probes to let 
users associate quantitative data values 
and coordinates with the visual represen¬ 
tation of their data. Using a data probe, 
users will reputedly be able to select a 
point on the surface and determine the 
exact value and position of the original 
data. 

The new version adds data transport 
protocols, remote module execution in 
heterogeneous networks, and support for 
8-bit X Windows terminals and emula¬ 
tors. AVS3 also features new data types 
for molecular or quantum data and an un¬ 
structured cell data type to support appli¬ 
cations developers in chemistry, compu¬ 
tational fluid dynamics, and finite 
element analysis. 

The new version also includes an im¬ 
age viewer with region-of-interest func¬ 
tions, imaging annotation, image histo¬ 
grams, 50 new modules including two 
new volume-rendering modules, scalar 
and vector field operations, user-defin¬ 
able parameter data types, and a scripting 
mechanism 

Stardent has also introduced its first 
AVS add-on product to provide advanced 
visualization for computational fluid dy¬ 
namics (CFD) research and engineering. 
The CFD Viewer works with AVS3 and 
is based on those AVS networks, mod¬ 
ules, data structures and libraries most 
often used in CFD. It reputedly lets users 
visualize CFD problems using pull-down 
menus and point-and-click operations. 

AVS3: Reader Service 30 
CFD Viewer: Reader Service 31 


Hewlett-Packard has introduced its 
most powerful desktop personal comput¬ 
er, the HP Vectra 386/25 PC. 

The 25-MHz 80386-based PC comes 
with 2 Mbytes of main memory (expand¬ 
able to 32 Mbytes), 32 Kbytes of cache 
memory, one serial and one parallel port, 
a mouse port, and a 3.5-inch or 5.25-inch 
high-density floppy disk drive. The sup¬ 
plied Super VGA video controller sup¬ 
ports standard VGA resolution, MDA, 
CGA, EGA, Hercules, 800x600 Super 
VGA, and 1,024x768 high-resolution 
modes. 

The new machine is available in three 
models. The Model 80 features an 84- 
Mbyte hard disk drive and sells for 
$6,999. The Model 170 has a 170-Mbyte 
hard disk and is priced at $7,999. The 
Model 1 has no disk drive and omits the 
Super VGA board; it sells for $5,399. 
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Ashton-Tate ships dBase IV 
VAX VMS version 

Ashton-Tate has shipped dBase IV 
Version 1.1 and has teamed with Digital 
Equipment Corp. to make a full imple¬ 
mentation available for VAX VMS sys¬ 
tems and workstations using Digital’s 
Network Application Support. The new 
version reputedly reduces memory re¬ 
quirements and includes Structured Que¬ 
ry Language improvements, simplified 
installation, and new language com¬ 
mands. 

The standard edition of dBase IV ver¬ 
sion 1.1 is $795. A developer’s edition 
sells for $1,295 and includes a royalty- 
free unlimited runtime distribution li¬ 
cense, the template-language source 
code, two extra LAN keys, and addition¬ 
al applications distribution tools and util¬ 
ities. A LAN Pack version that allows 
the addition of up to five users to a 
dBase IV LAN installation costs $995. 

The new version of dBase IV for VAX 
VMS will run on all VAX systems in¬ 
cluding VAXstation, Micro VAX and 



Hewlett-Packard Vectra 386/25 PC. 


1.1, teams with Digital for 


VAXcluster with Digital’s VAX VMS 
version 5.2. It includes enterprise-wide 
networking, multiuser and multitasking 
capabilities, virtual memory, and full se¬ 
curity, according to the companies. The 
VAX version maintains the DOS ver¬ 
sion’s look and feel and reputedly allows 
existing DOS-based dBase applications 
to run on VAX VMS systems with little 
or no modification. It can also be used as 
a front-end tool for VAX Rdb/VMS data¬ 
bases on a network or as a self-contained 
data management system without Rdb. 

dBase IV for VAX VMS, with identi¬ 
cal features as the Developer’s Edition 
on a PC, starts at $1,295 for Digital sin¬ 
gle-user workstations. For mid-range 
VAX systems like the VAX 4000, dBase 
IV costs $21,000. For the VAX 6000- 
410, dBase IV is priced at $33,000. Digi¬ 
tal also offers a four-user license for any 
VAX system for $4,995. 
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Hewlett-Packard unveils HP Apollo workstations 


The HP Apollo 9000 Series 400 is 
based on the Motorola 68040 and 68030 
processors and is compatible with exist¬ 
ing HP and Apollo 68000-based worksta¬ 
tions, according to the company. The 
workstations run the Unix-based Do¬ 
main/OS and HP-UX operating systems. 

At $4,990, the Model 400dl is an en¬ 
try-level desktop workstation and comes 
with a 19-inch monitor. It can be upgrad¬ 
ed from a 50-MHz 68030 to a 25-MHz 
68040. The 400t is based on the 50-MHz 
68030 and starts at $6,990, while the 
Model 425t based on the 25-MHz 68040 
starts at $8,990. 

Outfitted as VRX graphics worksta¬ 
tions, the machines are available with 
monochrome, color and, accelerated color 
options and have standard 1,280x1,024 
screen resolution. The VRX mono graph¬ 


ics system offers a 19-inch monitor. The 
color system comes with a 16-inch moni¬ 
tor and reportedly delivers 130,000 2D 
vectors per second. The Personal VRX 
accelerated graphics system uses a single 
i860 transform engine and offers up to 
270,000 3D vectors per second, accord¬ 
ing to the company. 

HP also has made available the 33- 
MHz, 68040-based Model 433s starting 
at $15,990 and the 50-MHz 68030-based 
400s staring at $13,990. These two mod¬ 
els offer a Turbo VRX option that reput¬ 
edly delivers up to 1 million 3D vectors 
per second. 

All HP Apollo 9000 models will in¬ 
clude the HP Visual User Environment, a 
window-based, graphical user interface. 
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Apple releases development tools on CD-ROM 


Apple Computer’s ETO (Essentials- 
Tools-Objects) features the most widely 
used Apple development tools and print¬ 
ed final documentation. It is distributed 
exclusively on CD-ROM and will be re¬ 
vised quarterly. 

ETO includes Macintosh Program¬ 
mer’s Workshop (MPW), a multilan¬ 
guage development environment, as well 
as the MacApp object-oriented applica¬ 
tion framework, which automatically 
handles standard Macintosh user-inter- 
face features. The CD-ROM also pro¬ 
vides tools for using 68000 assembly 


language and for object-oriented pro¬ 
gramming under C++ or Object Pascal. 
The disk also includes electronic ver¬ 
sions of developer documentation, such 
as Spinside Macintosh (Inside Macin¬ 
tosh, volumes 1-5). 

The complete ETO starter package is 
$995 and includes final version docu¬ 
mentation for all ETO tools and a year of 
updates. Updates are also available for 
customers who already own some of the 
products in ETO. 
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Sun introduces new color Sparcstation, peripherals 


Sun Microsystems has introduced the 
color Sparcstation IPC, a 15.8-MIPS 
RISC-based desktop system that includes 
a DOS-compatible, 3.5-inch floppy drive 
and a 207-Mbyte hard disk drive. The 
system is priced at $9,995. A diskless 
version with a floppy drive costs $8,995. 
The IPC features 8-24 Mbytes of memo¬ 
ry, a 16-inch color monitor, the 3D Open 
Windows user environment, 14 Deskset 
productivity tools, a new XView toolkit 
for designing 3D Open Look applica¬ 
tions, and a new release of the XI In 
News Window System 

The company has also introduced sev¬ 
eral new peripherals. The Sun Presto- 
serve is a Network File System accelera¬ 
tor board that lets the Sparcserver 470 
and 490 support more workstations and 
improves response time by up to 75 per¬ 
cent, according to the company. The 
product, including hardware and soft¬ 


ware, is priced at $5,995. 

Sun’s new Intelligent Peripheral Inter¬ 
face hard disk drive for the Sparcserver 
490 reputedly doubles the I/O transfer 
rate — compared to Sun’s existing IPI 
drive — to 6 Mbytes/second. According 
to the company, the 8-inch, 911-Mbyte 
drive boosts the random I/O performance 
of file server and database server appli¬ 
cations by up to 25 percent. The IPI 
drive costs $14,500. 

Also, the company’s new 128-Mbyte 
memory board gives the Sparcserver 470 
and 490 up to 672 Mbytes of error cor¬ 
recting code memory. The board is 
priced at $45,000. 


Sparcstation IPC: Reader Service 36 
Prestoserve: Reader Service 37 
IPI drive: Reader Service 38 
Memory board: Reader Service 39 


Muse offers English- 
language interface 

Occam Research Corp. claims that 
Muse, its English language-driven data- 
analysis software, is suited to Macintosh 
users who must develop, evaluate, con¬ 
nect, and review large amounts of data to 
arrive at recommendations or decisions. 

Muse’s relational database manager 
imports data in a variety of forms and 
formats — including flat files, ASCII, 
DBF, WKS, WK1, WK3, SYLK, and 
DIF — and organizes the data into 
Workbooks. These can then be converted 
into Databooks, which can be cross-ref¬ 
erenced with as many as 15 Databooks 
open at once, the company said. 

When users ask questions in English, 
using either the keyboard or mouse, 

Muse accesses relevant data from Data¬ 
books and puts the answer in a Work¬ 
book. Muse responds to one-dimensional 
questions with simple one-line responses, 
and to multi-dimensional questions with 
fully labeled, fully functional Workbooks 
containing numbers or text. Muse reput¬ 
edly lets users simultaneously reference, 
manipulate, reformat, calculate, and vi¬ 
sualize large data sets. 

Muse runs on a Macintosh SE or high¬ 
er with at least 2 Mbytes of RAM, a hard 
disk, and System Version 6.0.5 or higher. 
It will be available to developers and 
large user sites in October. General dis¬ 
tribution is scheduled for the first quarter 
of 1991. A single copy of Muse is $695 
without an extended support and devel¬ 
opment kit. 
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Cray Research announces 
disk storage system 

Cray Research has announced a new 
high-capacity disk subsystem designed to 
support its network supercomputing 
strategy. 

The company said its new DS-41 Disk 
Subsystem incorporates 8-inch disk tech¬ 
nology to offer large storage capacity, a 
small footprint, fast transfer rates, and 
low power consumption. Developed for 
use with Cray Y-MP, Cray X-MP, and 
Cray-2 systems, the unit allows daisy 
chaining to connect multiple disk storage 
units to a single channel on a Cray sys¬ 
tem. The DS-41 can store up to 19.2 bil¬ 
lion bytes of data per subsystem, and the 
company claims the unit can transfer 
data to and from the disk at a sustained 
rate of 9.6 million bytes per second. 
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Wang presents high-end 80486 and 80386 PCs 


Wang Laboratories says its 25-MHz, 
486-based PC 480/25C is designed for 
large MS-DOS applications such as fi¬ 
nancial services, for mulituser environ¬ 
ments like Unix, and for client/server- 
based LAN applications. Its 
small-footprint, 33-Mhz, 386-based PC 
350/33C is oriented toward individual 
use in desktop publishing, CAD, and 
database applications, according to the 
company. 

The 480/25C base unit is priced at 
$8,595 and comes with 4 Mbytes of main 
memory, an on-chip 8-Kbyte cache 
memory, an on-chip numeric coproces¬ 
sor, an eight-slot chassis with one paral¬ 
lel and two serial ports, a 1.2-Mbyte or 
1.44-Mbyte floppy disk drive, and a key¬ 
board. All system memory is on a single 
plug-in card to simplify memory upgrad¬ 
ing and configuration. 

The 350/33C costs $5,395 and offers 1 
Mbyte of main memory, a 64-Kbyte 
cache memory, a six-slot chassis with 
one parallel and two serial ports, a 1.2- 
Mbyte or 1.44-Kbyte floppy disk drive, 
and a keyboard. 

Both systems will support up to 16 
Mbytes of system memory, and both can 
copy the BIOS and video programs from 
ROM to 32-bit RAM to increase speed. 
The PC 480/25C also caches the BIOS 
for greater speed. 


Also, 20-, 40-, 100-, and 200-Mbyte 
IDE hard drives are available for both 
systems, and a 321-Mbyte ESDI drive is 
available for the 480/25C. The 480/25C 


can support up to 642MB of hard disk 
storage; the 350/33C, up to 400MB. 
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Wang PC 480/25C (left) and PC 350/33C. 


Sony releases CD-ROM products 


Sony Corporation of America has an¬ 
nounced four new CD-ROM drives and a 
write-once CD-ROM system. 

The CDU-541 internal drive and 
CDU-6211 external drive both support 
the SCSI-II (rev. 10) protocols. The em¬ 
bedded SCSI controller provides a burst 
transfer rate of 1.5 Mbytes/second, ac¬ 
cording to the company, and its 64-Kbyte 
ring buffer reputedly lets the drive read 
the data continuously with no latency for 
sequential reading. The CDU-531 inter¬ 
nal drive and CDU-6201 external drive 
both have a Sony bus controller and 8- 
Kbyte ring buffer. 

All four drives have an average access 
time of 0.38 seconds and employ real¬ 
time error correction. Also, the lens of 
each drive’s optical pickup is cleaned au¬ 
tomatically when the caddy is loaded or 
ejected. The drives can be mounted ei¬ 
ther horizontally or vertically. 

The CD Write-Once System uses a 
write-once, read-many (WORM) process 


to encode data permanently on a special 
CD-ROM disc. The system is designed 
for CD-ROM prototyping, data format¬ 
ting during the CD-ROM mastering pro¬ 
cess, direct publication of small quanti¬ 
ties of CD-ROM compatible discs, and 
secure publication of sensitive data. 

The system consists of a data encoder 
to organize the information in a CD- 
ROM format and a write-once optical 
disc drive in the CD-ROM form factor 
for recording the information. The write- 
once laser encodes the information on 
the writable disc, and the heat from the 
laser causes a chemical transformation 
of the disc that seals the information so 
it cannot be altered or erased. The result¬ 
ing disc is ISO-9660 compatible, allow¬ 
ing it to be played in CD-ROM disc 
drives. 


CD-ROM drives: Reader Service 43 
Write-once system: Reader Service 44 


Digital offers new servers 

Digital Equipment Corporation has an¬ 
nounced the VAX 4000 Model 300, a 
deskside computer featuring three dedi¬ 
cated 10-MIPS RISC processors for disk 
I/O and Ethernet network traffic tasks. 
DEC claims the server can handle up to 
1,600 disk I/O requests per second. 

Memory can be expanded to 128 
Mbytes in increments of 32 Mbytes, and 
disk storage can be expanded to 28 
Gbytes. An optional 1.2-GByte, 4-mm 
digital audio tape drive is available for 
backups. DEC will offer the VAX 4000 
in server, timesharing, realtime, and 
dual-host configurations. System prices 
start at $75,410 for the server version. 

Digital also announced the VAXserver 
6000, with a base price of $149,000. 
Both the VAXserver 4000 and 6000 in¬ 
clude software to support MS-DOS and 
OS/2 PCs, Apple Macintosh systems, 
and Unix- and VMS-based desktops. 

Reader Service 45 


September 1990 
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1C Announcements 


Company, Model, Function 


Analog Devices 
AD230/AD401, 402 
RS-232, -422 line 
drivers/receivers 


Cirrus Logic 
CL-SH360 
PC disk controller 


LSI Logic 
Mipset 

Five-device chip set 


Motorola 
MC34151 
MOSFET drivers 


National Semiconductor 
DP8531/8532 
Programmable clock 
generators 


Performance 
Semiconductor 
Pacemips R3000A/ 
R3400A 

32-bit RISC processors 

Raytheon 

R29771/R29773 

PROM/SPROM 


Siemens 

SAB 80C32/80C52 
Microcontrollers 


Systronix 
MS2184 
Peripheral chip 


Western Digital 
WD33C93B 
SCSI bus interface 
controller 


Comments 


R.S. No. 


AD230 family has 11 RS-232 line drivers/receivers ranging from two drivers and two receivers 120 
(14-pin AD231) to four drivers and five receivers (28-pin AD241). AD401 and 402 are configur¬ 
able for single-ended RS-232 or double-ended RS-422 standards and have four pin-selectable 
driver/receiver combinations. Comes in plastic DIP, SOIC, or cerdip. Cost (100s): AD232JN 
starts at $2.70; AD401 and 402, $9.00 

Single-chip disk controller reputedly transfers data at 24 Mbits/s and includes 88-bit Reed-Solo- 121 
mon intelligent error-correction code, power-down and wake-up mode, programmbale buffer 
segments, master/slave support, multisector transfer capability, Winchester data formatter, 
three-port buffer memory manager, and bus controller functions, inclusing 24-mA bus drivers. 

Comes in 100-lead quad flat pack. Cost planned to be less than $24 for quantities up to 1,000 

A five-chip set designed to work with LSI’s LR3000 CPU and LR3010 floating-point accelerator: 122 
LR3201 reset/interrupt controller, LR3202 bus controller, LR3203 DRAM controller, LR3204 
DRAM data controller, and LR3205 block transfer buffer. Available in 20- and 25-MHz speeds. 

Sample quantities available now; production quantities scheduled for shipment in fourth quarter. 
Comes in plastic quad flatpacks. Cost including the LR3000 CPU and LR3010 FPA (10 chips 
total) (1,000s): $704 for 20 MHz and $1,097 for 25 MHz. 

High-speed, dual inverting MOSFET drivers with low input current for CMOS and LSTTL logic 123 
compatibility. Features two independent channels with 1.5A totem pole outputs, 15-ns output 
rise and fall times with 1,000-pF load, and 6.0-mA standby current. Pin compatible with 
MMH0026 and DS0026 dual MOS clock drivers. Available in dual-in-line (DIP) or surface 
mount (SO) packages. Cost (10,000s): MC34151 $0.65 (DIP) or $0.68 (SO); MC33151 $0.82 
(DIP) or $0.87 (SO). 

Pair of clock generators can be programmed via a 4-bit bus to frequencies from 0.78125 Mhz to 124 
160 Mhz. DP8532 is a ROM-masked version that selects factory-programmed frequencies. 

Both driven from either a IMhz to 40-Mhz crystal oscillator or a TTL source. The devices use 
frequency synthesizer techniques and phase-locked loops and come in a 28-pin PLCC. Cost 
(100s): $25. 

The R3000A reputedly produces up to 60 percent greater sustained throughput than the R3000 125 

when operated at 40 MHz. Versions running at 33.33 MHz and 37 MHz also available. The 
R3400A CPU/FPA combines the CPU and FPA in one VLSI package with same pinout as the 
R3000A CPU. No price given. 


The R29771 is a standard bipolar PROM with a 55-ns maximum access time and a 35-ns enable 126 

access time. The R29773 is a power-switched SPROM with the same maximum access time and 
an 85-ns enable access time. Come in 24-pin 0.3" and 0.6" DIPs. Miltary versions available in 24- 
pin flat pack and 28-terminal LCC packages. Cost (100s): $9. 

Available in 12 MHz and 16 Mhz versions in factory-mask programmable ROM or as CMOS 127 
microcontrollers for external ROM. 80C52 offers 8Kx8-byte ROM, 256x8-byte RAM, four 8-bit 
ports, 32 I/O lines, three 16-bit timer/event counters, and a six-source, two-priority-level inter¬ 
rupt structure. 80C32 is identical except for programmable memory. Available in 40-pin PDIP 
and 44-pin PLCC. Cost (10,000s): 80C32, $3.30 (PDIP) or $3.50 (PLCC); 80C52 $3.50 (PDIP) 
or $3.80 (PLCC). 

A multifunction peripheral chip for the 80188 microcontroller family. The CMOS chip features 128 
DRAM control, two universal asynchronous receiver/transmitters, a keypad interface, LCD in¬ 
terface, speaker driver, watchdog timer, LED driver, and parallel printer port. Supports up to 1 
Mbyte DRAM. Comes in a 68-lead PLCC. Cost (5,000s): $10.80 

Accomodates 5- or 10-Mbyte/s peripherals on the same bus. Allows arbitration, disconnect/re- 129 
connect, parity generation and checking, soft reset, and synchronous data transfers. Pin-compat¬ 
ible with the company’s previous SBIC. Includes 48-mA drivers for direct connection to single- 
ended bus. Available in low-power CMOS 44-pin PLCC and 44-pin DIP versions. 
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IEEE COMPUTER SOCIETY 
Membership / Subscription Application 




BENEFITS 



Computer 

Computer comes automatically 
with membership. Written, 
reviewed, and refereed by 
experts, it features survey and 
tutorial articles covering the 
entire computer field, and 
departments such as new 
products, new product reviews, 
standards, and a reader forum 
called “The Open Channel.” 
(monthly). 


Technical Committees 

Participate in one or more of our 33 technical 
committees — networks of professionals with common 
interests in specialty areas within computer hardware, 
software, and applications. 

Standards Working Groups 
Participate in the development of the more than 100 
standards projects currently sponsored by the society 
in such diverse areas as software engineering, local 
area networks, microprocessor buses, design automa¬ 
tion, programming languages, and standards 
definitions. 

Computer Society Press Books 

Receive discounts of up to 50% on over 600 titles 
covering a broad spectrum of computer science topics 
such as networking, communications, advanced 
systems, image processing, security, artificial 
intelligence, and design automation. Over 60 new titles 
are published annually. 

Conferences and Tutorials 
Choose from more than 100 conferences annually, 
ranging from large industry-oriented conferences 
replete with exhibits to small, highly interactive 
workshops. Members receive special low rates. 


Schedule of Fees 


To join: see item 1, 2, or 3. 

To subscribe: see item 4. 

Membership dues and periodical subscriptions are annualized to, and expire on, 
December 31. Choose full- or half-year rate schedules depending on date of 
receipt by the Computer Society as indicated below. Half Year Full Year 
Mar 1-Aug 31 Sept 1-Feb 28 


I I don’t belong to the IEEE and I want 
to join just the Computer Society 


□ $23.50 □ $47.00 


2 1 don’t belong to the IEEE and I want 

to join both the Computer Society and the IEEE* 

I reside in Region 1 -6 (United States). □ $47.50 

I reside in Region 7 (Canada). □ $43.50 

lresideinRegion8(Europe, Africa, orthe Middle East) □ $43.00 

I reside in Region 9 (Latin America). □ $39.50 

I reside in Region 10 (Asia and Pacific). □ $38.50 

id the Computer Society may deduct $5 off the 


3 1 already belong to the IEEE and I want 
to join the Computer Society. 

IEEE Member Number_ 

^ OPTIONAL PERIODICALS for new or current members 

IEEE Computer Graphics and Applications (3061) 6 □ $10.00 

IEEE Design and Test (3111) . 

IEEE Expert (3151) . 

IEEE Micro (3071) . 

IEEE Software (3121) . 

Transactions on Computers (1161) 

Transactions on Knowledge and 

Data Engineering (1471) . 

Transactions on Parallel and 

Distributed Systems (1501) .4 □ $ 5.50 

Transactions on Pattern Anaysis and 

Machine Intelligence (1351) .12 □ $10.00 

Transactions on Software Engineering (1171) .12 □ $10.00 

Total amount remitted with this application $. 

□ Checks are accepted in Belgian, British, German, Swiss, Japanese, 

U.S. currencies. U.S. checks must be drawn on a U.S. bank. 

□ Visa □ Master Card □ American Express □ Eurocard 

ii11111111 ii 1111 

Charge Card Number 


□ $ 9.00 □ $18.00 


□ 

$10.00 

□ 

$20.00 

□ 

$10.50 

□ 

$21.00 

□ 

$ 9.00 

□ 

$18.00 

□ 

$ 9.50 

□ 

$19.00 

□ 

$10.00 

□ 

$20.00 

□ 

$10.00 

□ 

$20.00 

□ 

$ 5.00 

□ 

$10.00 

□ 

$ 5.50 

□ 

$11.00 

□ 

$10.00 

□ 

$20.00 

□ 

$10.00 

□ 

$20.00 


PRICES EXPIRE 12/31/90 


id the society's constitutions, bylaws,' and statements of 


MAILING ADDRESS 


EDUCATION (highest level co 


'ho knows you professionally) 


IEEE Member No. (if api 


Return to: IEEE Computer Society, 10662 Los Vaqueros Circle, P.O. Box 3014 Los Alamitos, CA 90720-1264 USA. pcc 

Residents of Europe mail to: IEEE Computer Society, 13, Avenue de I’Aquilon, B-1200, Brussels, BELGIUM. 

Asian / Pacific residents mail to: IEEE Computer Society, Ooshima Building, 2-19-1 Minami-Aoyama, Minato-ku, Tokyo 107 JAPAN. 









































Microsystem Announcements 


Company, Model, Function___Comments_ R.S. No. 


American Megatrends 

Enterprise 

486 motherboard 


American Megatrends 

Screamer 

386 motherboard 

Epson 

Equity 386SX Plus 
386SX PC 


Mars Microsystems 
Mariner 4i 

Sparc/PC workstation 


Micro Way 
Number Smasher 
Coprocessor board 


A 25-MHz 486-based motherboard with new EISA BIOS. Supports up to 32 Mbytes of on-board 
memory. Fits PC AT chassis. Offers eight expansion slots, on-board floppy controller support 
and battery. BIOS has built-in setup, system diagnostics, and video and RAM shadowing. No 
price given. 

A 33-MHz 386-based motherboard rated at 8.32 MIPS. Upgrades to a 486 with an adapter card. 
Features 64/256K write-back cache and supports up to 64 Mbytes of on-board memory. Fits PC 
AT chassis and has eight expansion slots. No price given. 

A small-footprint, 16-MHz, 80386SX computer. Built-in VGA with resolution up to 
800x600x16. Has serial, parallel, and mouse ports, four expansion slots, and three half-height 
drive bays. All configurations can support up to 16 Mbytes of RAM. Available with 1 Mbyte of 
RAM and a 3.5-inch or 5.25-inch floppy disk drive for $1,999, or with 2 Mbytes of RAM, a 40- 
Mbyte hard drive, and a 5.25-inch floppy drive for $2,999. 

A 25-MHz Sparc workstation built on an AT-size motherboard and integrated on an AT bus. Has 
a full-size PC case, 200-watt PC power supply, and 4-slot AT bus. Runs Sparc/OS 1.0. Optional 
plug-in DOS module includes 1-8 Mbytes of memory, 32-Kbyte cache and optional floating¬ 
point accelerator. Base price of $5,995 includes a diskless unit with 16-inch monochrome 
monitor. Costs $10,995, with 19-inch color monitor, 207-Mbyte hard drive, and DOS copro¬ 
cessor module. 

A 33- or 40-MHz coprocessor board based on Intel’s 860 chip and designed for AT-class ma¬ 
chines. Has 8 Mbytes of 64-bit four-way interleaved DRAM. Communicates with host via 1.5- 
Mbyte/s link adaptors. Includes NDP-860 compiler, diagnostic software, and boot EPROM con¬ 
taining power-up code and monitor. Cost: $5,995 (33 MHz) and $7,200 (40 MHz). 


National Semiconductor Ethemode 16 NB 
Ethernode cards 
Macintosh Ethernet 
boards 


Norad 

Super Shield 
Monitor shield 


Piiceon 
I/O boards 

Micro Channel boards 

Sintec 
Control R II 
Microcontroller 


3Com 

Etherlink 16 

16-bit Ethernet adapter 

Truevision 
True VGA 
VGA-to-NTSC card 


Zeos 

386/20 laptop 
Laptop computer 


16-bit, half-card Nubus board for all Macintosh II models and based on Na- 140 
tional’s DP839X chip set. Ethemode 32 SE/30 is a 32-bit DMA board for the Macintosh SE/30 
processor direct slot; it uses the company’s DP83932 controller. Both include Ethertalk-compat- 
ible software drivers and connectors for both thick and thin Ethernet coax cable. Cost: Ethemode 
16 NB, $495; Ethemode 32 SE/30, $595. 

A radiation, glare, and reflection shield for 19-inch and two-page monitors. Screen consists 141 

of grounded, metalized monofilament mesh. Usable display area measures 16-3/8x12-3/4 
inches. Fits displays from Sony, Supermac, Radius, Rasterops, Megagraphics, Hitachi, and 
Sigma. Cost: $349. 

Ten serial/parallel 1/0 boards for IBM PS/2 models 50, 50Z, 55SX, 60, 65SX, P70, 70 and 80. Con- 142 
forms to Micro Channel specifications. Supports DOS, Zenix, Unix, and OS/2. Cost ranges from 
$105.00 for a board with one parallel port to $395.00 for a board with 4 serial and 2 parallel ports. 

An 8031-based microcontroller module for data loggers, lab instmments, robotics, motor con- 143 
trol, etc. The 3.5x4.5-inch unit includes 128 bytes internal RAM, space for 8 Kbytes on-board 
SRAM and 8/16 Kbytes on-board EPROM, 14/16 bits of parallel I/O, and access to the 8031 ad¬ 
dress, data, and control buses. Operates on +5V DC. Cost: $64.95 

A 16-bit Ethernet adapter for IBM PC XT, AT and compatibles, PS/2 Models 25 and 30, and 144 

EISA-based computers. Includes drivers for 3+ Open, LAN Manager, and Netware 286 and 386. 

Cost: $445 in single-packs or $1,975 in five-packs ($395 per board). 

A VGA-to-NTSC video graphics card that offers video encoding, live video overlay, simul- 145 

taneous VGA display, composite and S-Video NTSC output, and advanced genlock. Allows 
exporting of noninterlaced VGA text, graphics, and animations to interlaced, broadcast-qualitv 
NTSC. Cost: $995. 

A battery-powered 386-based laptop computer running at 20 MHz and offering a backlit flores- 146 
cent LCD display, 42-Mbyte hard drive, and 1.44-Mbyte floppy drive. Comes with an AC power 
adapter. Cost: $2,195 to $3,495 depending on configuration. 


COMPUTER 








NEWLY PUBLISHED TITLES 
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SOFTWARE MAINTENANCE AND COMPUTERS 

by David H. Longstreet 



Software Maintenance and Computers examines the “real” costs of software and how these expenses 
will affect budgets. The text familiarizes programmers with some of the basic concepts of software 
maintenance and teaches them to apply the techniques of software maintenance to attain the benefits 
of its applications. It also allows researchers to analyze a substantial amount of literature on results of 
past research from around the globe. This title contains three original papers and 32 reprinted articles. 


Contents: Management Issues: Maintenace, Repair, and Testing: Case Studies; Automated Tools. 
294 pages. June 1990. Hardbound. ISBN0-8186-8898-X. $55.00. Member $44.00. Catalog# 896 


DIGITAL IMAGE WARPING 

by George Wolberg 
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Digital Image Warping consolidates the wide range of contributions to this subject into a single coherent 
framework and contains all original material. The text describes various common formulas for spatial 
information, discusses sampling theory and filtering problems, explores image resampling along with 
several common interpolation kernels, investigates antialiasing, and presents fast warping techniques 
that are based on scanline algorithms. Included are 36 color photographs, and informative sections on 
image reconstruction, real-time texture mapping, separable algorithms, 2-pass transforms, mesh warp¬ 
ing, and special effects. 

Contents: Digital Image Acquisition; Spatial Transformation; Sampling Theory; Image Resampling; Antialiasing. 

340pages. July 1990. Hardbound. Color. ISBN0-8186-8944-7. $95.00. Member$76.00. Catalog# 1944. 

MILESTONES IN SOFTWARE EVOLUTION 

edited by Paul W. Oman and Ted G. Lewis 


Quality Software is created through a planned and concentrated effort that requires a strong knowl¬ 
edge of analytical techniques, design methods, implementation guidelines, and testing strategies; 
but most critically, it demands a recognition of the history of software development that has led to 
today’s methods. Milestones in Software Evolution is a collection of original works that changed the 
course of software development. The text contains 29 of the most significant papers that influenced 
the path of software evolution and that will affect its progression in the near future. 

Contents: The First Guiding Light; The Awakening Towards Science and Engineering; Stages of Software 
Development; Improvements in Quality and Production; Paradigms Challenging the Norms; Looking Forward. 

332 pages. July 1990. Hardbound. ISBN 0-8186-9033-X. $70.00. Member $76.00. Catalog # 2033. 


VISUAL PROGRAMMING ENVIRONMENTS: 
PARADIGMS & SYSTEMS 

by Ephraim P. Glinert 


This first volume defines two separate parts in programming languages; 
abstract language, language that determines domain along with sets of 
operations and constraints on its elements, and concrete language, language 
that provides a representation for the abstract language. The text also 
examines current and future visual parallel and distributed computing 
environments. 

676 pages. July 1990. Hardbound. ISBN 0-8186-8973-0. $90.00. Member $77.00. 

Catalog # 1973. 


VISUAL PROGRAMMING ENVIRONMENTS: 

APPLICATIONS & ISSUES 

by Ephraim P. Glinert 

This tutorial presents a well-balanced, comprehensive exposition of the best 
up-to-date research relating to visual and iconic progamming. The text 
surveys a variety of iconic systems implemented in recent years, and describes 
systems which support visualization of programs, processes, and more. 

This volume includes several papers that trace the evolution of BALSA 
and investigates the realm of commercial data processing. 
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Send your orders to: 

IEEE Computer 
Society Press 

10662 Los Vaqueros Circle 
Dept. # 009-6 
P.0. Box 3014 
Los Alamitos,CA 90720 

or call 

1-800-CS-B00KS 

or 

714-821-8380 

Visa, Mastercard, and 
AMEX accepted 

* Handlibg charges - $5.00. 


Catalog#1974. 

from the IEEE COMPUTER SOCIETY PRESS 
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ADVANCE ANNOUNCEMENT 


THIRD INTERNATIONAL 
CONFERENCE ON 
COMPUTER VISION 

INTERNATIONAL HOUSE, OSAKA 
OSAKA, JAPAN 
DECEMBER 4-7,1990 


GENERAL CHAIR 

Nagao, M. (Kyoto U.) 

PROGRAM COCHAIRS 
Tsuji, S. (Osaka U.) 

Kak, A, (Purdue U.) 

Eklundh, J.-O, (Royal Inst. Tech.) 
PROGRAM COMMITTEE 
Asada, M. (Osaka U.) 

Ayache, N. (INRIA) 

Blake, A. (Oxford U.) 

Buxton, B. (GEC) 

Davis, L.S. (U. Maryland) 

Fischler, M.A. (SRI) 

Grimson, E.L. (MIT) 

Haralick, R.M. (U. Washington) 

Huang, T.S. (U, Illinois) 

Horaud, R. (LIFIA-IMAG) 

Ikeuchi, K. (CMU) 

Jain, R.C, (U. Michigan) 

Kanatani, K. (Gumma U.) 

Koenderink, J.J. (U. Utrecht) 

Mackworth, A.K. (U. British Columbia) 
Mannaert, H. (Katholieke U. Leuven) 
Mayhew, J. (U. Sheffield) 

Minoh, M. (Kyoto U.) 

Nagel, H.-H. (Fraunhofer Inst.) 

Neumann, B. (U. Hamburg) 

Nevatia, R. (U. Southern California) 

Ohta, Y. (Tsukuba U.) 

Oshima, M, (ETL) 

Riseman, E.M. (U, Massachusetts) 

Sandini, G. (U. Genoa) 

Shakunaga, T. (NTT) 

Sugihara, K, (U. Tokyo) 

Toriwaki, J. (Nagoya U.) 

Tsotsos, J.K, (U. Toronto) 

Xu, G. (Osaka U.) 

FINANCE CHAIR 
Yodogawa, E. (ATR) 

LOCAL ARRANGEMENTS CHAIR 
Shirai, Y. (Osaka U.) 

Faculty of Engineering, Osaka Univ. 

Suita, Osaka 565, Japan 

Phone: 81-6-877-5111 Fax: 81-6-876-4975 

Email: shirai@ccmip.ccm.osaka-u.ac.jp 


ICCV '90 is the third international conference devoted 
solely to computer vision. It will consist of 24 long and 100 
short, high quality papers selected from 420 submitted 
papers. The long papers will be presented in single tracks 
and the short ones in parallel tracks. 

December 4, Tuesday 

Session I: Reflection 

Session A1: Image Flow 
Session Bl: Features 
Session A2: Structure from Motion 
Session B2: Segmentation and Occlusion 
Session II: Programming 
Session III: Image Flow 
Reception 

December 5, Wednesday 

Session IV: Matching 

Session V: Motion 

Session A3: Object Recognition 

Session B3: Surface 

Session A4: Object Recognition 

Session B4: Recovery 

Session A5: Pose Estimation 

Session B5: Early Vision 

December 6, Thursday 

Session VI: Features 

Session VII: Range and Motion 

Session A6: Motion 

Session B6: Range 

Session A7: Motion 

Session B7: Representation 

Session A8: Robot Vision 

Session B8: Snake 

December 7, Friday 

Session VIII: Shape 

Session IX: Object Recognition 

Session A9: Range 

Session B9: Shape 

Session A10: Applications 

Session B10: Hough Technique 

December 8, Saturday: Technical Tour 

ATR (Advanced Telecommunication Research Institute 

International) and Nara (Ancient Capital) 

Sponsored by: 
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ICCV ’90 REGISTRATION FORM 


ICCV ’90 HOUSING FORM 


Please complete and return this form (with credit card 
endorsement or check made payable to IEEE Com¬ 
puter Society) to: 

ICCV '90 

Michelle Carbone 

IEEE Computer Society 

1730 Massachusetts Avenue, N.W. 

Washington, DC 20036 
Phone: (202) 371-1013 
FAX: (202) 728-0884 


Name_ 

Company_ 

Address_ 

City/State/Zip_ 

Country__ 

Daytime Telephone No,_ 

FAX No_ 

IEEE/CS Membership Number 


Conference Registration Fees 

Please register me as follows (check appropriate fee): 

Advance Registration (until November 4) 

□ Member —$270 

□ Non-member — $340 

□ Student —$60 

Late Registration (after November 4) 

□,Member — $320 
□nNon-member — $400 

□ Student —$60 

Students must submit a photocopy of current student 
identification and may not be employed full-time. 

Payment may be made by check. Visa, MasterCard, 
American Express, or purchase order. Purchase orders 
must accompany registration form. All checks must be 
made payable to the IEEE Computer Society in U.S. 
dollars drawn on a U.S. bank. 


Cardholder Name___ 

Card No.__ 

Expiration Date_ 

Signature___ 

Requests for refunds must be received in the IEEE Com¬ 
puter Society office no later than November 4. Refunds 
are subject to a $50 service charge. Participants who 
fail to attend or notify the IEEE Computer Society of 
cancellation prior to the refund date are responsible for 
full payment. Substitutions are permitted at any time. 


Return this form to: 

JTB Tours and Convention Division, Kansai District 
1-3-7 Tosabori, Nishi-ku, Osaka 550, Japan 
Phone: 81-6-449-1071, FAX: 81-6-449-1074 

JTB offers the following special rates for ICCV '90 
attendees: 

Single Twin 

A. Miyako Hotel Osaka 11,076 yen 14,729 yen 

B. Asahi Plaza Hotel 8,240 yen 12,360 yen 

C. l-house Hotel 5,665 yen 11,330 yen 

A. Miyako Hotel Osaka 

6-1-55 Uehonmachi, Tennoji-ku, Osaka 543, Japan, 
Phone: 81-6-773-1111 

5 minutes to conference site on foot. Limousine serv¬ 
ice from/to Osaka International Airport is available. 

B. Asahi Plaza Hotel 

1-9-7 Sennichimae, Chuoh-ku, Osaka 542, Japan, 
Phone: 81-6-211-1011 

20 minutes to conference site by train and walk. 

C. l-house Hotel 

8-2-6 Uehonmachi, Tennoji-ku, Osaka 543, Japan, 

Phone:81-6-773-8181 

Conference site. 

All prices are special conference rates including tax 
and service charge. Reservations will be accepted on 
a first-come, first-served basis, except l-house Hotel (39 
single rooms and 9 twin rooms) which will be preferen¬ 
tially reserved for student attendees. 

All reservation requests must be received in writing by 
JTB no later than November 16, 1990. Any adjustment 
to the original reservation must be submitted in writing 
at least 15 days prior to arrival. 

JTB accepts American Express, Visa, and MasterCard 
as a means of confirming your reservation. Please 
check: 

Hotel Preference (specify A, B, or C) 

1._ 2._ 3._ 

□ Single □ Twin 

□ AmEx ' □ Visa >• 0 MasterCard 

Cardholder Name ___ 

Card No___ 

Expiration Date___ 

Signature___ 

Company___ 

Address_._ 

City/State/Zip ___— 

Country___ 

Phone _ 

Arrival Date and Time. . . 

Departure Date and Time___ 

For additional information, contact the JTB Tours 
and Convention Division Kansai District. 
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Editor: Edmund L. Gallizzi, Computer Science Dept., Eckerd College, St. Petersburg, FL 33733, phone (813) 864-8272, Compmail+ e.gallizzi 


System architects, technologists spark dialogue at IEEE workshop 


Gail R. Lalk, Bellcore 

Harold S. Stone, IBM Research Division 

Anis Husain, Honeywell 

Systems architects and hardware tech¬ 
nologists had a rare opportunity to hear 
each other’s views on the critical paths 
toward achieving high-performance sys¬ 
tems when the first IEEE Workshop on 
Interconnections within High-Speed 
Digital Systems convened May 14-16. 

Held at Santa Fe, New Mexico, the 
2 1/2-day event was organized by the 
IEEE Communications Society Techni¬ 
cal Committee on Interconnections 
within High-Speed Digital Systems and 
cosponsored by the IEEE Computer Soci¬ 
ety and the IEEE Lasers and Electro-Op¬ 
tics Society. Randy Moulic of IBM 
served as workshop chair, and Harold 
Stone, also of IBM, was program chair. 

The purpose of the workshop was to 
bring together members of the computer 
and telecommunications communities to 
discuss issues associated with high¬ 
speed, short-distance interconnections 
(photonic and electrical) in various high- 
performance systems. 

The common thread among the diverse 
100 participants was a concern that sys¬ 
tem interconnections are becoming a bot¬ 
tleneck to achieving high performance 
and will impede the future development 
of economical computer and telecommu¬ 
nications switching systems. Lively de¬ 
bate materialized among the attendees 
regarding the source of the interconnec¬ 
tion problems and the potential of emerg¬ 
ing technologies to alleviate the prob¬ 
lems. 

Opening address. Don Channin of the 
David Samoff Research Center got the 
technical program off to a provocative 
start, discussing the requirements for 
emerging technologies — such as optical 
interconnections — to find a market in fu¬ 
ture systems. His thesis was that, at the 
chip-to-chip level, optical technologies 
will only find a market if the price per 
square inch versus circuit line density is 
competitive with electrical technologies. 

As a path, Channin suggested applying 
wavelength and electrical multiplexing 
to today’s optical technologies to become 


competitive. This generated controversy 
among other attendees who felt that 
highly parallel free-space optical inter¬ 
connection architectures constitute a bet¬ 
ter way to achieve the high densities and 
low cost that is necessary. 

The discussions of the merits of free- 
space optics versus wavelength or time 
multiplexed planar optics came up often 
during the course of the workshop. 

Technical program. The program was 
divided into five half-day sessions: 
Trade-offs; Current systems; Devices, 


One of the strong points of 
consensus among the 
participants concerning 
emerging technologies 
was the need for denser 
integration of electronic 
and optoelectronic 
circuits to achieve the 
performance required in 
future systems at a 
reasonable cost. 


components, and packaging; Architec¬ 
tures; and Futures. In addition, an infor¬ 
mal evening session was held to discuss 
issues not covered in the scheduled pro¬ 
gram. 

Several of the presentations and dis¬ 
cussions focused on issues associated 
with the architectures used for intercon¬ 
nection. Issues included shared-memory 
versus message-passing approaches, 
bused versus point-to-point topologies, 
and the level of parallelism that may be 


feasible in systems designed with electri¬ 
cal or optical interconnections. 

A1 Hartman of MCC introduced some 
of the architecture issues by discussing 
trade-offs at the backplane level. Two 
panel sessions were devoted to architec¬ 
ture issues such as cache coherency, dy¬ 
namic partitioning, and locality. The 
choices for a particular system depend on 
the latency and control complexity that 
can be tolerated, the degree of random¬ 
ness in the traffic, and the ability to ar¬ 
range the processing elements in a system 
to reduce the average interconnection 
lengths. 

Tom Lane of Honeywell discussed 
some of the practical considerations by 
presenting the results of a project in 
which optical interconnections were im¬ 
plemented in the Connection Machine. 

Emerging technologies. Some of the 
emerging technologies discussed in the 
scheduled presentations included mul¬ 
tichip modules, advanced electrical con¬ 
nectors, polymer waveguides, optoelec¬ 
tronic integrated circuits, and devices for 
high-density, free-space optical inter¬ 
connections. 

Bruce Booth of Dupont presented an 
overview of the state of the art in polymer 
waveguide technologies; Dave Miller of 
AT&T discussed the physics of optical 
interconnection devices such as SEED 
(the self-electro-optics-effect device); 
and Satoshi Ishihara of the Electro-Tech¬ 
nical Laboratory of Japan discussed opti¬ 
cal interconnection device research in 
Japan. 

An additional highlight was presenta¬ 
tion of the design of a superconducting 
crossbar switch by Fernand Bedard of the 
National Security Agency during the eve¬ 
ning session. One of the strong points of 
consensus among the participants con¬ 
cerning emerging technologies was the 
need for denser integration of electronic 
and optoelectronic circuits to achieve the 
performance required in future systems 
at a reasonable cost. 

Clive Collins of IBM summarized the 
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interconnection limitations well by de¬ 
fining the performance of a system as the 
amount of work achieved per cycle multi¬ 
plied by the number of cycles per second. 
From this perspective, two paths can be 
used to improve system performance: use 
parallel processing to improve the work 
achieved by cycle, or improve the tech¬ 
nology to increase the number of cycles 
per second. His thesis was that the real 
payoff will come from improving the pro¬ 
cessing speeds on the chip and that the 
system cost will come down only if the 
chip packaging technologies are made 
more economical. 

Evolution needed. While there is no 
clear indication of where interconnection 
technology will go in the future, there was 


a consensus that interconnection tech¬ 
nology must evolve in some form to meet 
the performance requirements of future 
systems. 

Metal interconnections have already 
begun the evolution process, as exempli¬ 
fied by the new connector technology 
presented by Bob Marker of Cinch and 
Steve Corbesero of Augat. Tom Knight of 
MIT demonstrated new ideas in the evo¬ 
lution of metal interconnections by de¬ 
scribing advanced driver/receiver cir¬ 
cuits as well as system design techniques 
that lead to greater overall bandwidth. As 
new ways of fabricating metal intercon¬ 
nections are developed, they may have to 
compete with optical methods, either 
guided or through free-air, whose devel¬ 
opment is taking place concurrently. 


On the heels of this first event organ¬ 
ized by the Communication Society TC 
on Interconnections within High-Speed 
Digital Systems, the workshop commit¬ 
tee will sponsor future activities (includ¬ 
ing another workshop in 1991) designed 
to better define the issues in this field and 
encourage research toward enhancing 
the performance of future-generation 
computer and telecommunications sys¬ 
tems by improving the interconnection 
technologies. 

On the business side, Anis Husain of 
Honeywell was elected TC chair for 
1990-91 and Gail Lalk of Bellcore was 
elected vice chair. Anyone interested in 
joining the TC or learning more about its 
objectives should contact Lalk at (201) 
829-5213. 


Cohen keynotes 1990 Computer-Based Medical Systems Symposium 

Margaret G.E. Peterson, Hospital for Special Surgery, New York 


Richard J. Cohen, Hermann Von 
Helmholtz Professor at Harvard and 
MIT, discussed the development of medi¬ 
cal monitoring in depth June 4 when he 
keynoted the third annual IEEE Sympo¬ 
sium on Computer-Based Medical Sys¬ 
tems at the University of North Carolina 
at Chapel Hill. 

The event, sponsored by the IEEE Com¬ 
puter Society, the society’s Computation 
Medicine Technical Committee, the 
IEEE Engineering in Medicine and Biol¬ 
ogy Society, and the IEEE Eastern North 
Carolina Section, was held June 3-6. H. 
Troy Nagle of North Carolina State Uni¬ 
versity served as chair of the general com¬ 
mittee, and Jim Brown of the Research 
Triangle Institute was program chair. 

Cohen titled his talk “Beat-to-Beat 
Variability in Cardiovascular Variables: 
Noise or Music?” and opened with a short 
history of heart-rate monitoring. Histori¬ 
cally, fetal heart monitoring was the first 
real-time medical monitoring system, he 
said. This introduced the analysis of 
physiologic signals such as heart rate. 
Heart-rate monitoring in adults had 
moved to beat-to-beat variability. 

The objective, according to Cohen, 
was to predict for patients the outcome 
from the cardiovascular status, using the 
ratios of the frequency peaks. A different 
power spectrum was observed in patients 
during cardiac transplant rejection. Co¬ 
hen demonstrated that the log-log plot of 
spectral density verses frequency is a 
straight line with a slope of approximately 
minus one. The power spectrum is pro¬ 
portional to the inverse of the frequency. 
Cohen then went on to discuss the model¬ 
ing of physiologic systems in general. 


F. Thomas Wooten, president of the 
Research Triangle Institute, delivered 
welcoming remarks to the attendees and 
reminded them that the first free-stand¬ 
ing academic computer science program 
in the US was instituted at Chapel Hill. 
Wooten then presented a survey on the 
history of the integrated circuit. This was 
particularly pertinent since IC coinven¬ 
tor Robert Noyce had died the day before. 

Technical tracks. Following an open¬ 
ing day of tutorials, CBMS 90 featured 
tracks entitled Communications and im¬ 
age processing, Communication aids for 
disabled people, Medical device reliabil¬ 
ity and safety. Cardiovascular technolo¬ 
gies, Clinical assessment and risk evalu¬ 
ation, Artificial intelligence and neural 
nets, and Health effects and risk assess¬ 
ment of environmental agents. 

In the Communication aids track, Karl 
P. Durre of Colorado State University de¬ 
scribed the Braille Butler, a new ap¬ 
proach to nonvisual computer applica¬ 
tions. He discussed the need for instant 
feedback from the computer. A layperson 
needs to be able to find information on the 
screen, he said. The designers are devel¬ 
oping a dedicated system for the blind 
that displays up to 20 characters. The idea 
is to enable direct connection to the 
sighted environment. The user will be 
able to feel the screen scroll using a 
cursor analogous to scrolling for a sighted 
person. 

Robin Shaw of the Veterans Admini¬ 
stration Medical Center in Rhode Island 
described an Eyewink control interface, 
the final aim of which is wheelchair con¬ 
trol for the severely disabled. Relatively 


speaking, the device is inexpensive. A 
good discussion of safety features of the 
device ensued. Presently, the medical 
center is using a 286-AT portable to fit on 
the chair. 

A series of papers was presented by a 
group at the University of Sherbrooke, 
Canada, on remote control for an im¬ 
planted urinary prosthesis. The papers, 
presented in several different tracks, in¬ 
cluded a multichannel bladder stimulator 
and discussions of the reliability of the 
systems. 

The Medical device track featured 
three papers on particular aspects of test¬ 
ing the reliability of software, including 
the problem of design and reliability in 
patient monitoring systems. The papers 
presented attendees with good examples 
to compare and contrast techniques and 
problems. 

W.B. Spector of Cigna offered insights 
into how the insurance industry goes 
about reviewing new medical devices 
and technology. J.C. Knight of the Uni¬ 
versity of Virginia presented a clear and 
concise summary of the issue of software 
reliability. 

S.C. Roy of the Microelectronics Cen¬ 
ter of North Carolina led off a hardware 
reliability session, describing the design 
of a special chip for electrocardiogram 
data compression. W.J. Tomkins of the 
University of Wisconsin-Madison de¬ 
scribed a method for testing hardware, 
specifically interpretive ECG machines. 
Fabio Rodriguez of Dartmouth College 
presented an interesting and informative 
paper comparing several programmable 
pacemakers and their performance when 
exposed to high-energy radiation. It was 
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one of several informative student pre¬ 
sentations. 

Database sessions. The use and relia¬ 
bility of databases came up in several 
CBMS 90 sessions. There was a discus¬ 
sion of the use of the relational database 
in a case-control study of the effect of Ra¬ 
don on health. One of the AI sessions fea¬ 
tured a discussion of the use of databases 
to support explanations. Michael Galvin 
from the National Institute of Environ¬ 
mental Health Sciences described the in¬ 
terest of the NIEHS in risk assessment 


and epidemiological surveys. 

Student papers were accepted for com¬ 
petition at this year’s symposium and 
were judged by a panel of faculty. In gen¬ 
eral, the presentations were very profes¬ 
sional and reflected the advent of com¬ 
puter-generated graphics. 

The symposium featured a poster ses¬ 
sion for the first time that could have been 
called a demonstration session, since it 
was particularly useful to those who 
wished to demonstrate some aspect of 
their computer-based work. Six such 
presentations were included. The session 


was so successful that it appears it will be 
scheduled at future CBMS meetings. 

The proceedings, order No. 2040, can 
be obtained from the Computer Society 
Press, Los Alamitos, California, by call¬ 
ing (800) CS-BOOKS or (714) 821-8380 
in California. 

CBMS 91 will be held at the Stouffer 
Harborplace Hotel in Baltimore, Mary¬ 
land, May 12-14, 1991. For further infor¬ 
mation or to volunteer, telephone Russ 
Eberhart, Johns Hopkins University Ap¬ 
plied Physics Laboratory, at (301) 953- 
5037. 


Humphrey to keynote software engineering standards application event 

Norman F. Schneidewind, Naval Postgraduate School, and Publicity Chair, SESAW 4 


Watts Humphrey of the Software Engi¬ 
neering Institute will present the keynote 
address, “The Role of Standards in Soft¬ 
ware Process Management,” at the 
Fourth Software Engineering Standards 
Application Workshop May 21-23, 1991. 
Sponsored by the IEEE Computer Soci¬ 
ety, SESAW 4 will be held at the Hanalei 
Hotel in San Diego, California. 

“Software is an increasingly critical 
technology and one in which US industry 
is in danger of losing its historical leader¬ 
ship position,” according to Humphrey. 

“To maintain and strengthen our soft¬ 
ware capabilities, we need to focus in¬ 
creasing attention on the process used to 
develop and maintain software,” he says. 
“This requires that we invest in process 
improvement, define the critical process 
activities, and establish standards to 
guide our work.” 

Humphrey will outline “the key ele¬ 
ments of software process management 
together with the role standards play in 
establishing a controlled and measured 
software process improvement pro¬ 
gram.” 

Next on the SESAW 4 agenda, Marvin 
Zelkowitz of the University of Maryland 
and Fletcher Buckley of GE Aerospace 
and Standards editor of Computer will 
present opposing sides on the usefulness 
of IEEE standards in what is believed to 
be the first formal debate ever held at an 
IEEE-sponsored software conference. 

Norman Schneidewind, moderator of 
the planned “Great Debate,” said 
Zelkowitz will argue in favor of the reso¬ 
lution, “That IEEE software engineering 
standards are a waste of time, money, and 
effort,” and Buckley will argue against. 
An opportunity for audience participa¬ 
tion will be provided after the formal de¬ 
bate. 

Schneidewind said the program com¬ 


mittee wanted to give voice to those in the 
software community who are skeptical 
about the efficacy of standards and the 
standards-making process and simulta¬ 
neously allow the side that believes in 
standards an opportunity to rebut. “We 
feel the debate format provides the most 
effective way to focus the issue,” Schnei¬ 
dewind added. 

The overall objective of SESAW 4 is to 
assess the application of software engi¬ 
neering standards and to project the 
course of software engineering standards 
for the next decade, according to Vera 
Edelstein of Nynex, the general chair 
who is also chair of the IEEE Software 
Maintenance Standard Working Group. 

Edelstein is encouraging strong inter¬ 
national participation in the workshop. 
She has invited European Space Agency 
and International Standards Organiza¬ 
tion representatives from the UK, Japan, 
Canada, and the US to participate. Addi¬ 
tionally, there will be representation 
from the US Defense Dept, and the Na¬ 
tional Institute of Standards and Technol¬ 
ogy. 

David Card of Computer Sciences Cor¬ 
poration, the program chair, said the 
agenda will feature papers, panels, and 
tutorials. The papers will be presented 
under two major subsets: (1) Assessment 
and (2) Future directions. 

The Assessment element will be fur¬ 
ther divided to focus on 

Historical perspective 

• Are we standardizing the right thing? 

• What has been the effect of standards 
on the software engineering process? 

• Are standards leading or trailing cur¬ 
rent practice? 

• What is the process of producing stan¬ 
dards? 


Status 

• How do we integrate standards into 
current processes? 

• What are the liability implications of 
standards? 

• Where/how do I apply standards? 

• What standards are in development? 
(IEEE, JTC-1, the DoD, X3, NASA, 
the ISO, the American Society for 
Quality Control, NIST) 

• How do you manage the cost of imple¬ 
menting standards? 

• What are the success stories? 

• Can we apply standards after the fact? 

• Whose standards do we follow? 

The Future directions portion will 
focus on 

• Are standards necessary? 

• What is the effect of European Com¬ 
munity 92 on standards? 

• What is software process/product cer¬ 
tification? 

• Are research findings being incorpo¬ 
rated into standards? 

• What are software warranties? 

• How do standards affect the software 
engineering process? 

• What standards should I follow? 

The panel discussions will feature 
members of the IEEE and other standards 
working groups reporting on standards 
development status. The tutorials will be 
conducted the day before and the day af¬ 
ter the workshop. 

For additional information, contact 
Vera V. Edelstein, Nynex, 500 West¬ 
chester Ave., White Plains, NY 10604, 
phone (914) 683-2888. 
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CALL for PAPERS 

The second international 
workshop on raster imaging 
and digital typography 

Boston, October 15-16,1991 

Submission deadline: January 15,1991 



Program Committee: 

Chair: Robert A. Morris, UMB 
Vice-chair: Roger Hersch, EPFL 
Debra Adams, Xerox PARC 
Jacques Andre, IRISA 
Patrick Baudelaire, DEC PRL 
Richard Beach, Xerox PARC 
Charles Bigelow, Stanford University 
Bruce Brown, Oracle 
William Cowan, University of Waterloo 
Andre Gurtler, Schule fur Gestaltung 
John Hobby, Bell Laboratories 
Ernst Imhof, URW 
Peter Karow, URW 
Hideko Kunii, Ricoh 
Yoshio Ohno, Keio University 
Theo Pavlidis, SUNY Stony Brook 
Stephen Schiller, Adobe Systems 
Richard Southall, Xerox Europarc 
Robert Ulichney, DEC 
Jacobo Valdes, Sun Microsystems 
Wang Xuan, Peking University 


To receive guidelines for authors or 
other electronic or paper mail about 
the conference, contact the chair: 

Prof. Robert A. Morris, RIDT 91 

Dept, of Math, and C.S. 
UMASS/Boston 
Boston, MA 02125-3393 
USA 


The workshop is sponsored by the University of Mas¬ 
sachusetts at Boston and the IEEE Computer Society. 
The day before the conference there will be two con¬ 
current one-day tutorials: one on type design, led by 
Hans Meier (Horgen, Switzerland) and Kris Holmes 
(of Bigelow and Holmes, Palo Alto, California), and 
one on type rasterization, led by Jacobo Valdes (of 
Sun Microsystems, Mountain View, California). 

Submissions will be refereed by the program com¬ 
mittee. Accepted papers will be collected in a pro¬ 
ceedings that the organizers expect to be published 
by the Cambridge University Press. Complete papers 
in English on any of the following or related topics 
are welcomed: 

• measuring type quality 

• character design, representation and transformation 

• shape acquisition and manipulation 

• color printing 

• fast rasterization hardware 

• applications of human vision science to type design 

• character generation and recognition 

• page description languages 

• anti-aliasing 

• digital halftone processing 

• font representations for automatic scan conversion 

• rasterization algorithms 




University of Massachusetts at Boston 


telephone: (617) 287-6466 

email: ridt91-request@cs.umb.edu 


IEEE COMPUTER SOCIETY 
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CALL FOR 

PAPERS, 

TUTORIALS, 

AND PANEL 

SESSION 

PROPOSALS 


INTERNATIONAL 
SYMPOSIUM ON SOFTWARE 
RELI ABILITY ENGINEERING ■ 1991 

AUSTIN, TEXAS 
MAY 17-18,1991 


The Second International Symposium on Software Reliability Engineering is sponsored by the IEEE 
Computer Society and its Technical Committee on Software Engineering, and the National Aeronautics 
and Space Administration. This year, the Symposium will convene immediately after the International 
Conference in Software Engineering. 

Theme: Assessing Reliability Research and Practice 


SRES-91 will focus on the transfer of software reliability engineering research to the software development and 
management process. SRES - 91 seeks papers that will advance the state of the art of software reliability measurement and 
modeling and help foster increased interaction between academic and application communities. 


SUGGESTED TOPICS SUBMISSION INFORMATION 


Papers, Tutorials and Panel Session Proposals are 
invited in the following suggested areas. 

■ Methods 

Software Reliability Engineering, Software 
Reliability Measurement and Modeling, 
Decision Making, Software Safety, 
Software Quality and Reliability, Metrics 

• Current Best Practice 

Software Reliability and Quality 
Assessment, Practical Experiences with 
Software Reliability Models, New and 
Innovative Uses of Software Reliability 
Measurement and Modeling, Processes and 
Techniques in Software Engineering for 
Quantifying Aspects of Reliability 

• Data Collection 

Tools, Databases, Evaluation 

• Accreditation of Software 

Standards, Practices, Legal Issues, 
Procedures 

• Management Issues 

SCOPE AND PURPOSE 

Software Reliability Engineering is the study of 
the nature of software defects and the failure of 
software systems to meet functional requirements. 
As the correct functioning of our society, and our 
individual, day-to-day livelihood depends more 
and more on software, the potential of disastrous 
software is mounting to alarming proportions. 
The reliability of software systems and systems 
containing embedded software, is of increasing 
concern to industry and government. SRES-91 
will entertain papers, tutorials, and panel 
proposals in the areas of basic research, 
experiences of technology transfers and analysis 
of empirical research. Contributions that describe 
the results of investigations, and not simply 
proposed investigations, are solicited in any of the 
areas of suggested topics. The conference is open 
to all who are involved with or have an interest in 
software reliability, quality, and safety; 
professionals and researchers, from industry, 
government, and academia. 


Five (5) copies in English of full papers, tutorial proposals, panel proposals, or 
experience reports should be submitted to the Program Chair at the address listed. 
Papers should be 2000-5000 words in length. These papers must not have been 
published or submitted elsewhere for publication. A cover page must include: title, 
all authors' names and complete mailing addresses and telephone numbers together 
with a maximum 250 word abstract and keyword list. The first page of the paper 
should have the paper title and the beginning text of the document. If the paper is 
accepted, one of the authors is expected to present the paper at SRES-91. 

Panel Proposals should include the tide, proposed chair, tentative panelists 
(including a short vita), a 2 or 3 paragraph description of the subject of the panel 
discussion together with a rationale for the panel. Panelists must have agreed to 
participate prior to the submission of the panel proposal. 

Experience Reports are intended to provide exposure for software reliability 
professionals of practical experiences in the application of software reliability 
measurement and modeling theory to practical applications. The contributors 
should submit a 4-6 page written description of the experience or case study and a 
one page summary of the project for a ten minute presentation at the conference. 
The paper should be clearly identified as an experience report. The evaluation 
criteria for these submissions will be based on the relevance of the results to future 
work in the area. 

Tutorial Session proposals are solicited for both full-length, all-day tutorials and 
also for mini-tutorials of two to four hour length. 

IMPORTANT DATES: 

• Submission Deadline: November 1, 1990 

• Acceptance Notification: December 15, 1990 

• Camera-ready copy: February 1, 1991 


CONFERENCE COMMITTEE 


PROGRAM CHAIR 


GENERAL CHAIR 
Anneliese von Mayrhauser 
Computer Science Department 
Illinois Institute of Technology 
600 S. Lambert Road 
Glen Elyn, IL 60137 
(708) 790-4385 
email: csavm@karl.iit.edu 


John C. Munson 
Division of Computer Science 
University of West Florida 
Pensacola, FL 32514 
(904)474-2989 

email: jmunson@dcsnet.uwf.edu 


NASA 

National Aeronautics e 
Space Administration 






i INSTITUTE OF ELECTRICAL ANI 


IEEE COMPUTER SOCIETY 


Ames Research Center 


TECHNICAL COMMITTEE ON SOFTWARE ENGINEERING 













CALL FOR PAPERS 


IEEE Micro seeks manuscripts for gen- 
eral-interest issues in 1991. Topics of 
particular interest range from artificial intelli¬ 
gence and biological computing to VHDL de¬ 
sign and workstations. Submit manuscript to 
Joe Hootman, EE Dept., Univ. of North Dako¬ 
ta, PO Box 7165, Grand Forks, ND 58202, 
phone (701) 777-4331. 


ISSCC 91,1991 IEEE Int’I Solid-State Cir¬ 
cuits Conf.: Feb. 13-15, 1991, San Francisco. 
Sponsors: IEEE Solid-State Circuits Council 
et al. Submit 30 copies of abstract and sum¬ 
mary by Sept. 26,1990, to John H. Wuorinen, 
2 School St., PO Box 304, Castine, ME 
04421, phone (207) 326-8811. 


Int’I J. of Computer Simulation plans a spe¬ 
cial issue in 1991 on distributed simulation. 
Publisher: Ablex. Submit five copies of com¬ 
plete manuscript by Sept. 31,1990, to Bojan 
Groselj, Center for Advanced Computer Stud¬ 
ies, Univ. of Southwestern Louisiana, PO Box 
44330, Lafayette, LA 70504, phone (318) 
231-6606, fax (318) 231-5791, e-mail bojan@ 


Fourth Int’I Conf. on Industrial and 
'^§7 Eng. Applications of Artificial Intelli¬ 
gence and Expert Systems: June 2-5, 1991, 
Kauai, Hawaii. Sponsors: ACM et al. Submit 
four copies of extended abstract by Oct. 1, 
1990, to Jim Bezdek, Computer Science Div., 
Univ. of West Florida, Pensacola, FL 32514, 
phone (904) 474-2784, fax (904) 474-2096, 
e-mail jbezdek@uwf.bitnet. 

CHI 91,1991 Conf. on Human Fac- 

tors in Computing Systems: Apr. 28- 
May 2, 1991, New Orleans. Sponsor: ACM. 
Submit six copies of abstract/paper by Oct. 1, 
1990, to Peter Poison, Psychology Dept., 
Univ. of Colorado, Muenzinger Hall, Campus 
Box 345, Boulder, CO 80309-0345, phone 
(303) 492-5622, e-mail ppolson@clipr. 
colorado.edu. 


IEEE Trans, on Parallel and Distributed 
Systems plans a special issue in July 1991 on 
parallel languages and compilers. Submit six 
copies of paper by Oct. 1,1990, to David 
Padua, Center for Supercomputing Research 
and Development, Univ. of Illinois, Urbana, 

IL 61801, phone (217) 333-4223, e-mail 
padua@uicsrd.csrd.uiuc.edu; Benjamin Wah, 
Coordinated Science Lab., Univ. of Illinois, 
1101 W. Springfield, Ave., Urbana,IL 61801, 
phone (217)333-3516,e-mail wah%acquinas@ 
uxc.cso.uiuc.edu; or Pen-Chung Yew, Center 
for Supercomputing Research and Develop¬ 
ment, Univ. of Illinois, Urbana, IL 61801, 
phone (217) 244-0045, e-mail yew@uicsrd. 
csrd.uicu.edu. 


ISCAS 91, 24th IEEE Int’I Symp. on Cir¬ 
cuits and Systems: June 11-14, 1991, Singa¬ 
pore. Sponsor: IEEE Circuits and Systems 


Soc. Submit six copies of summary by Oct. 1, 
1990, to Technical Program Chair, ISCAS 91 
Secretariat, Comm. Int’l Associates, 44/46 
Tanjong Pagar Rd., Singapore 0208, phone 
(65) 226-2823, fax (65) 226-2877. 

PCCS 1, First Int’I Workshop on Perfor- 
mability Modeling of Computer and Comm. 

Systems: Feb. 18-19, 1991, Enschede, The 
Netherlands. Submit three copies of abstract 
or paper by Oct. 1,1990, to Nico M. van Dijk, 


Free Univ., Faculty of Economics, PO Box 
7161, 1007 MC Amsterdam, The Netherlands, 
phone 31 (20) 548-7061, fax 31 (20) 462-645, 
e-mail ectricvu@sara.nl. 

1991 IEEE Int’I Symp. on Information The¬ 
ory: June 23-29, 1991, Budapest, Hungary. 
Submit short paper by Oct. 1,1990, and long 
paper by Nov. 1,1990, to Anthony Ephremi- 
des, EE Dept., Univ. of Maryland, College 
Park, MD 20742, phone (301) 454-6871. 


Call for papers and referees for Computer 


7 Computer seeks articles for inclusion in upcoming special issues. 


Distributed Computing Systems has been selected as the theme for the Au¬ 
gust 1991 issue. Prospective authors are invited to submit tutorial, survey, de¬ 
scriptive, case-study, application-oriented, or pedagogic manuscripts. See the 
July 1990 issue of Computer (p. 120) for complete information. 

Abstracts are due by November 15, 1990, and the deadline for full manu¬ 
scripts is January 1,1991. Notification of decisions is set no later than March 15, 
1991, and the final version of each manuscript is due no later than May 1, 1991. 

Submittals and questions should be directed to either of the guest editors, 
Mukesh Singhal, Dept, of Computer and Information Science, Ohio State Univer¬ 
sity, Columbus, OH 43210, phone (614) 292-5839, e-mail singhal ©cis.ohio- 
state.edu; or Thomas L. Casavant, Dept, of Electrical and Computer Eng., Uni¬ 
versity of Iowa, Iowa City, IA 52242, phone (319) 335-5953, e-mail tome® eng. 
uiowa.edu. 


Heterogeneous Distributed Database Systems is the theme planned for the 
December 1991 issue. See the August 1990 issue of Computer (p. 115) for com¬ 
plete information. 

Abstracts of the manuscripts are due no later than January 1 , 1991 , and eight 
copies of the full manuscripts must be submitted by April 1,1991. Notification of 
decisions is July 1,1991, and the final version of each manuscript is due Sep¬ 
tember 1, 1991. 

Submissions and questions should be directed to Sudha Ram, Department of 
Management Information Systems, Eller School of Management, University of 
Arizona, Tucson, AZ 85721, phone (602) 621-2748, e-mail ram@mis.arizona.edu 
on Internet or ram@arizmis on Bitnet. 


For submittal to Computer, manuscripts must not have been previously 
published or currently submitted for publication elsewhere. Each manu¬ 
script should be no more than 32 typewritten, double-spaced pages long, 
including all text, figures, and references. Each submittal should include a 
cover page that contains the title of the article, the full name(s) and 
affiliation(s) of the author(s), complete postal and electronic address(es) of 
all the authors as well as their telephone and fax number(s), a 300-word 
abstract, and a list of keywords identifying the central issues of the manu¬ 
script’s contents. The final manuscript should be approximately 8,000 
words in length and contain no more than 12 references. 

If you are willing to review articles for any of these special issues, 
please send a note listing your research interests to Bruce Shriver, editor- 
in-chief of Computer or to one of the guest editors listed for the particular 
issue. Shriver may be reached at the University of Southwestern Louisi¬ 
ana, PO Drawer 42730, Lafayette, LA 70504-2730, phone (318)231-5811, 
fax (318) 265-5472, e-mail b.shriver on Compmail-h or shriver@usl.edu on 
Internet. 
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J. of Internetworking Research and Experi¬ 
ence seeks papers for 1991 issues. Publisher: 
John Wiley and Sons. Submit full paper or 
short technical note by Oct. 1,1990, to Debo¬ 
rah L. Estrin, Computer Science Dept. 
mc0782, Univ. of Southern California, Los 
Angeles, CA 90089-0782. 

11th Int’l Conf. on Decision-Support Sys¬ 
tems: June 3-5, 1991, Manhattan Beach, 

Calif. Sponsor: Inst, for Management Scien¬ 
ces. Submittal deadline: Oct. 1,1990. For 
submittal guidelines, contact TIMS, 290 
Westminster St., Providence, RI02903. 

Fifth Int’l Workshop on High-Level Syn¬ 
thesis: Mar. 3-6, 1991, Buhlerhohe, West 
Germany. Cosponsors: IEEE et al. Submit 12 
copies of extended summary by Oct. 8,1990, 
to Wolfgang Rosenstiel, Forschungszentrum 
Informatik an der Univ. Karlsruhe, Haid-und- 
Neu Strasse 10-14, D-7500 Karlsruhe, Germa¬ 
ny, phone 49 (721) 6906-81, fax 49 (721) 
6906-88, e-mail rosenstiel@ira.uka.de. 


FTCS 21, 21st Int’l Symp. on Fault- 
Tolerant Computing: June 25-27, 

1991, Montreal. Submit six copies of abstract 
by Oct. 15, 1990, and six copies of paper by 
Nov. 19, 1990, to Eduard Cemy, Univ. of 
Montreal, Dep. d’informatique et de recherche 
operationnelle, PO Box 6128, Station A, Mon¬ 
treal, Que., Canada H3C 3J7, fax (514) 343- 
2155, e-mail cerny@iro.umontreal.ca. 


Int’l Conf. on Cognitive Sciences: 

'5*7 Apr. 29-May 2, 1991, Montreal. Co¬ 
sponsors: AFCET et al. Submit five copies of 
complete paper by Oct. 15, 1990, to Gilles 
Gauthier, Math, and Computer Science Dept., 
Univ. of Quebec, PO Box 8888, Station A, 
Montreal, Que., Canada H3C 3P8, phone 
(514) 987-8212, fax (514) 987-8477. 


Symp. on Solid Modeling Foundations and 
CAD/CAM Applications: June 5-7, 1991, 
Austin, Texas. Sponsor: ACM SIGGraph. 
Submit abstract by Oct. 15,1990, and five 
copies of full paper by Nov. 30,1990, to Jaro- 
slaw Rossignac, J2-C03, IBM T.J. Watson Re¬ 
search Center, PO Box 704, Yorktown 
Heights, NY 10598, phone (914) 784-7630, 
fax (914) 784-7455, e-mailjarek@ibm.com. 

Intelligent Design and Manufacturing will 
be published by John Wiley and Sons. Submit 
abstract by Oct. 15, 1990, to Andrew Kusiak, 
Industrial Eng. Dept., Univ. of Iowa, Iowa 
City, IA 52242, phone (319) 335-5939. 

Flairs 91, Florida Artificial Intelligence Re¬ 
search Symp.: Apr. 2-5, 1991, Cocoa Beach, 
Fla. Sponsor: Florida Artificial Intelligence 
Research Society. Submit eight copies of ex¬ 
tended abstract by Oct. 15,1990, to Douglas 
D. Dankel II, BNR, 35 Davis Dr., Research 
Triangle Park, NC 27709, phone (919) 991- 
8746, e-mail ddd@ufl.edu. 


IBM Large-Scale Computer Analysis and 
Modeling Conf.: Apr. 24-26, 1991, Park City, 
Utah. Prizes of $25,000, $15,000, and $10,000 
to be awarded for best papers. Deadlines: Oct. 
16, 1990, for registration; Jan. 15, 1991, for 
paper submittal. For submittal information. 


contact IBM Competition Administrator, 36 
Mill Plain Rd., Suite 404, Danbury, CT 
06811, phone (203) 794-1355, fax (203) 792- 
7507. 


^ Ninth IEEE VLSI Test Symp.: Apr. 
'5^' 16-18, 1991, Atlantic City, N.J. Co¬ 
sponsor: IEEE Philadelphia Section. Submit 
abstract (50 words) and summary (200-300 
words) by Oct. 19, 1990, to Kedong Chao, 
Johns Hopkins Univ., Applied Physics Lab, 
John Hopkins Road Bldg. 23-295, Laurel, MD 
20723, phone (301) 953-6121 or (301) 953- 
8603, fax (301) 953-1093. 


ICDCS 91, 11th Int’l Conf. on Dis- 
tributed Computing Systems: May 20- 

24, 1991, Arlington, Texas. Submit five cop¬ 
ies of abstract and paper by Oct. 23,1990, to 
Benjamin W. Wah, ICDCS 91, Coordinated 
Science Lab, MC228, Univ. of Illinois, 1101 
W. Springfield Ave., Urbana, IL 61801-3082, 
phone (217) 333-3516, fax (217) 244-1764, 
e-mail wah7 0 aquinas@uxc.cso.uiuc.edu. 


Int’l J. of Computer Simulation plans a spe¬ 
cial issue in early 1991 on simulation of mul¬ 
tiple processor/distributed systems. Publisher: 
Ablex. Submit four copies of complete manu¬ 
script by Oct. 30,1990, to Kallol Bagchi, Inst, 
of Electronic Systems, Aalborg Univ., Fredrik 
Bajers Vej 7, DK-9220 Aalborg 0, Denmark, 
fax (45) 98-156-740, e-mail kkb@iesd.auc.dk. 


Int’l Symp. on Software Reliability 
Eng.: May 17-18, 1991, Austin, Texas. 
Cosponsors: IEEE Computer Society Techni¬ 
cal Committee on Software Eng. and the Nat’1 
Aeronautics and Space Administration. Sub¬ 
mit five copies of full paper by Nov. 1,1990, 
to John C. Munson, Computer Science Div., 
Univ. of West Florida, Pensacola, FL 32514, 
phone (904) 474-2989, e-mail jmunson@ 
dcsnet.uwf.edu. 


Conf. on Advanced Research in VLSI: Mar. 
25-27, 1991, Santa Cruz, Calif. Submit five 
copies of draft paper by Nov. 1, 1990, to Car¬ 
lo H. Sequin, Univ. of California, CS Div., 
529B Evans Hall, Berkeley, CA 94720. 

Computer Graphics and Education 91: Apr. 
4-6, 1991, Barcelona, Spain. Sponsor: Int’l 
Federation for Information Processing. Submit 
six copies of extended abstract or draft paper 
by Nov. 1, 1990, to Steve Cunningham, Com¬ 
puter Science Dept, California State Univ. at 
Stanislaus, Turlock, CA 95380, phone (209) 
667-3176, e-mail rsc@altair.csustan.edu; or 
Roger Hubbold, Computer Science Dept., 
Univ. of Manchester, Oxford Road, Manches¬ 
ter M13 9PL, UK, phone (44) 61-275-6158, 
e-mail hubbold@uk.ac.man.cs. 

Int’l J. Computer-Aided VLSI Design plans a 
special issue on VLSI implementations of arti¬ 
ficial neural networks. Publisher: Ablex. Sub¬ 
mit five copies of full papers by Nov. 1,1990, 
to Medhi Zargham, Computer Science Dept., 
Southern Illinois Univ., Carbondale, IL 
62901-45411, phone (618) 453-6048, e-mail 
ga3633@siucvmb on Bitnet. 

21st Int’l Symp. on Multiple-Valued Logic: 

May 26-29, 1991, Victoria, Canada. Submit 


five copies of manuscript and abstract by Nov. 
1, 1990. to Wayne Current, Electrical Eng. 
and Computer Science Dept., Univ. of Cali¬ 
fornia at Davis, Davis, CA 95616, phone 
(916) 752-1839 or 0583 (for the Americas); 
Michel Israel, IIE-CNAM, 18, Allee Jean Ros¬ 
tand, BP 77, 91002 Evry Cedex, France, 
phone 33 (1) 60-77-97-40 (for Europe and Af¬ 
rica); or Okihiko Ishizuka, Electronic Eng. 
Dept., Miyazaki Univ., Miyazaki-Shi 889-21, 
Japan, phone (81) 985-58-2811 (for Asia and 
the Pacific). 

Eighth Int’l Conf. on Testing Computer 
Software: June 17-21, 1991, Washington, 

DC. Sponsor: Data Processing Management 
Assoc. Educational Foundation. Submit four 
copies of abstract by Nov. 1,1990, to Gene¬ 
vieve Houston-Ludlam, Frontier Technolo¬ 
gies, 190 Admiral Cochran Dr., Suite 180, 
Annapolis, MD 21401, phone (301) 266-8244, 
fax (301)224-3840. 


Fifth Int’l Conf. on Logic Programming: 

June 25-28, 1991, Paris. Cosponsors: Assoc, 
of Logic Programming et al. Submit six copies 
of paper by Nov. 3,1990, to Koichi Furuka- 
wa, ICOT, Mita Kokusai Bldg., 21 F 4, 28 
Mita 1, Chome, Minato-ku, Tokyo, Japan 108, 
e-mail furukawa@icot.or.jp. 


CVPR 91, IEEE Computer Soc. Conf. 
on Computer Vision and Pattern Rec¬ 
ognition: June 3-7, 1991, Lahaina, Maui, Ha¬ 
waii. Submit four copies of complete paper by 
Nov. 12, 1990, to Gerard Medioni, Inst, for 
Robotics and Intelligent Systems, PHE 204, 
me 0273, Univ. of Southern California, Los 
Angeles, CA 90089-0273, e-mail medioni @ 
dworkin.usc.edu. 


ICCI 91, Int’l Conf. on Computing and In¬ 
formation: May 27-29, 1991, Ottawa, Cana¬ 
da. Submit six copies of paper by Nov. 14, 
1990, to ICCI 91, School of Computer Sci¬ 
ence, Carleton Univ., Ottawa, Canada K1S 
5B6. 


/£g\ SCM 3, Third Int’l Workshop on 
Software Configuration Manage¬ 
ment: June 12-14, 1991, Trondheim, Norway. 
Cosponsors: ACM et al. Submit four copies of 
position paper and full paper by Nov. 15, 

1990, to Peter Feiler, Software Eng. Inst., Car¬ 
negie Mellon Univ., Pittsburgh, PA 15213- 
3890, phone (412) 268-7790, e-mail phf@sei. 


tfHh CAR 91, Fifth Int’l Symp. on Com- 
vU' puter Assisted Radiology: July 3-6, 
1991, Berlin. Sponsor: Technical Univ. Ber¬ 
lin. Submit five copies of abstract by Nov. 15, 
1990, to Heinz U. Lemke, Inst, for Technical 
Computer Science, Sekr CG-FR3-3, Franklin- 
strasse 28-29, D-1000, Berlin 10, Germany, 
phone 49 (30) 314-73100; or Michael H. 
Rhodes, Toshiba America MRI, 280 Utah 
Ave., South San Francisco, CA 94080, phone 
(415) 875-2909. 


IEEE Trans, on Systems, Man, and Cyber¬ 
netics plans a special issue on distributed arti¬ 
ficial intelligence. Submit five copies of 
manuscript by Nov. 15,1990, to Edmund H. 
Durfee, EECS Dept., Univ. of Michigan, 1101 
Beal Ave., Ann Arbor, MI 48109-2110, phone 
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Symp. on Experiences with Distribut- 
ed and Multiprocessor Systems: Mar. 
21-22, 1991, Atlanta. Sponsor: Usenix Assoc. 
Submit 10 copies of full paper by Nov. 19, 

1990, to Gene Spafford, Software Eng. Re¬ 
search Center, Computer Sciences Dept., Pur¬ 
due Univ., West Lafayette, IN 47907-2004, 
phone (317) 494-7825, e-mail spaf@ cs. 
purdue.edu. 

Arith 10,10th Symp. on Computer 
Arithmetic: June 26-28, 1991, Greno¬ 
ble, France. Cosponsors: ACM et al. Submit 
four copies of complete paper by Nov. 19, 

1990, to David W. Matula, Computer Science 
and Eng. Dept., Southern Methodist Univ., 
Dallas TX 75275, phone (214) 692-3080, fax 
(214) 692-4138, e-mail matula@csvax.seas. 
smu.edu (for the Americas and the Pacific); or 
Peter Komerup, Math, and Computer Science 
Dept., Odense Univ., DK-5230 Odense, Den¬ 
mark, phone (45) 66-15-86-00, fax (45) 65- 
93-26-91, e-mail komerup @imada (for Eu¬ 
rope, Africa, and Asia). 

ISCA 18,18th Int’l Symp. on Com- 
puter Architecture: May 27-30, 1991, 
Toronto. Cosponsor: ACM. Submit five cop¬ 
ies of manuscript by Nov. 21,1990, to John 
Hayes, Electrical Eng. and Computer Science 
Dept., Univ. of Michigan, 1301 Beal Ave., 

Ann Arbor, MI 48109, phone (313) 763-0386. 

Fifth Israel Conf. on Computer Sys- 
terns and Software Eng.: May 28-29, 

1991, Herzlia, Israel. Sponsors: IEEE Com¬ 
puter Soc. Israeli Chapter et al. Submit four 
copies of extended abstract by Dec. 14,1990, 
to M. Winokur, c/o ORTRA, PO Box 50432, 
Tel Aviv 61500, Israel, phone 972 (3) 664- 
825, fax 972 (3) 660-952. 

Second Int’l Conf. on Algebraic Methodolo¬ 
gy and Software Technology: May 22-24, 
1991, Iowa City, Iowa. Submit abstract by 
Jan. 1,1991, to AMAST Conf., Computer 
Science Dept., Univ. Of Iowa, Iowa City, IA 
52242. 

Compsac 91,15th Int’l Software and 
Applications Conf.: Sept. 11-13, 1991, 
Tokyo. Cosponsor: Information Processing 
Society of Japan. Submit six copies of paper 
by Jan. 12,1991, to Lionel M. Ni, Michigan 
State Univ., Computer Science Dept., A714 
Wells Hall, East Lansing, MI 48824-1027, 
phone (517) 353-4386, fax (517) 336-1061, 
Internet ni@cps.msu.edu (for the Americas, 
Europe, and Africa); or Motoei Azuma, Wase- 
da Univ., c/o Business Center for Academic 
Societies of Japan, 3-23-1 Hongo, Bunkyo-ku, 
Tokyo 113, Japan, phone 81 (3) 817-5831, fax 
81 (3) 817-5836. 

Sixth Int’l Workshop on Software 
Specification and Design: Oct. 25-26, 
1991, Como, Italy. Submit five copies of reg¬ 
ular or position paper by Jan. 21,1991, to 
Carlo Ghezzi, Dip. di Elettronica Politecnico 
di Milano, Piazza Leonardo Da Vinci 32, 
20133 Milano, Italia, e-mail relett24@imipoli. 
bitnet. 


CALENDAR 


/£|^l In the accompanying Calendar, the IEEE Computer Society logo identifies 
the conferences the society is sponsoring or participating in. Other confer¬ 
ences of interest to our readers, as well as their sponsors, are also listed. 

For inclusion in Call for Papers or Calendar, submit the following information: 
event name, date(s), location, and sponsor(s) as well as the phone and fax num¬ 
bers and the electronic address of the person to contact. In addition, for Calls for 
Papers listings, include the name of the person to whom papers should be sub¬ 
mitted and the deadline for submittals. 

Computer should receive the above-mentioned information at least five weeks 
before the month of publication (i.e., for the November 1990 issue, send infor¬ 
mation for receipt by September 20,1990) to Chuck Governale, Calendar Dept., 
Computer, PO Box 3014, Los Alamitos, CA 90720-1264. 


September 1990 


Hanscom Air Force Base, MA 01731, fax 
(617) 377-4498. 


Conf. on Multiuser Interfaces and Applica¬ 
tions, Sept. 24-26, Heraklion, Crete, Greece. 
Cosponsors: IFIP et al. Contact Rena Kalait- 
zaki, Computer Science Dept., Univ. of Crete, 
GR 714-09 Heraklion, Crete, Greece, phone 
30 (81) 210-057. 

Int’l Workshop on Expert Systems in Eng., 
Sept. 24-26, Vienna. Sponsor: Christian Dop¬ 
pler Expert Systems Lab, Univ. of Vienna. 
Contact Wolfgang Nejdl, Tech. Univ. of Vien¬ 
na, Applied Computer Science Dept., CD Lab 
for Expert Systems, Paniglgasse 16, 1040 Vi¬ 
enna, Austria, fax 43 (222) 505-5304, e-mail 
nejdl@vexpert.at. 


Fourth Conf. on Putting Methods and Tools 
into Practice as Aids to Design Information 
Systems, Sept. 25-27, Nantes, France. Spon¬ 
sor: Univ. de Nantes, Inst. Univ. de Technolo¬ 
gic, Lab. d’lnformatique, Liana. Contact H. 
Habrias, 3 Rue du Marechal Joffre, 44041 
Nantes Cedex 01, France, phone (33) 4030- 
6090, fax (33) 4030-6001. 

Sixth Int’l Expert Systems Conf., Sept. 25- 

27, London. Cosponsors: Int’l J. Knowledge 
Eng., Int’l J. Neural Networks. Contact Jean 
E. Mulligan, Learned Information, Woodside, 
Hinksey Hill, Oxford OX1 5AU, UK, phone 
44 (865) 73-02-75, fax 44 (865) 73-63-54. 


Tencon 90, IEEE Region 10 Conf. on Com¬ 
puter and Comm. Systems, Sept. 24-27, 

Hong Kong. Cosponsor: IEEE Hong Kong 
Section. Contact Y.S. Cheung, Electrical and 
Electronic Eng. Dept., Univ. of Hong Kong, 
Pokfulam, Hong Kong. 

Fifth Knowledge-Based Software Assistant 
Conf., Sept. 24-28, Syracuse, N.Y. Sponsor: 
Rome Air Development Center. Contact Bar¬ 
bara Radzisz, Data and Analysis Center for 
Software, PO Box 120, Utica, NY 13503, 
phone (315) 336-0937. 

Cl 90,1990 Int’l Symp. on Computa 
tional Intelligence, Sept. 24-29, Mila¬ 
no, Italy. Sponsors: ACM, F.I.S. Cassa di 
Rosp. o. PC. Contact Giorgio Valle, Univ. Mi¬ 
lano. Dip. Scienze Della Informazione, Via 
Moretto 20133, Milano, Italy, phone 39 (2) 
757-5228, fax 39 (2) 761-10556, e-mail 
valle @ imiucca.bitnet. 


SIGComm 90, Sept. 26-28, Philadelphia. 
Sponsor: ACM SIGComm. Contact David 
Farber, Univ. of Pennsylvania, 200 S. 33rd 
St., Philadelphia, PA 19104-6389, phone 
(215) 898-9508, fax (215) 898-0587, e-mail 
farber@cis.upenn.edu; or Phil Karn, Bell 
Comm. Research, MS 2P-357, 445 South St., 
PO Box 1910, Morristown, NJ 07962-1910, 
phone (201) 829-4299. 

Future Trends 90, Workshop on Fu- 
ture Trends of Distributed Comput¬ 
ing Systems, Sept. 30-Oct. 2, Cairo. Contact 
Stephen S. Yau, Univ. of Florida, CIS Dept., 
Rm. 301, Gainesville, FL 32611, phone (904) 
392-3261. 

15th Conf. on Local Computer Net 
works. Sept. 30-Oct. 3, Minneapolis, 
Minn. Contact Harvey A. Freeman, Lanworks, 
Inc., 5871 Cedar Lane Rd., St. Louis Park, 

MN 55416, phone (612) 591-5837. 


AIRIES 90, Al Research in the Environ¬ 
mental Sciences Workshop, Sept. 25-27, 

Montreal. Cosponsors: Univ. of Quebec at 
Montreal, Centre Researche Informatique de 
Montreal. Contact Rosemary M. Dyer, GL/ 
LYP, AIRIES 90, Air Force Geophysics Lab, 


1990 Tech. Symp. on Microelectronic Pro¬ 
cessing Integration, Sept. 30-Oct. 5, Santa 
Clara, Calif. Sponsor: Int’l Soc. for Optical 
Eng. Contact SPIE, PO Box 10, Bellingham, 
WA 98227-0010, phone (206) 676-3290, fax 
(206) 647-1445. 
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of Maryland, A.V. Williams Bldg., College cord Ave., Cambridge, MA 02138, phone 
Park, MD 20742, phone (301) 454-1808. (617) 661-1840. 


Second Int’l Conf. on Algebraic and Logic 
Programming, Oct. 1-3, Nancy, France. 
Sponsor: Inst. Nat’l de Recherche en Informa- 
tique et en Automatique (INRIA). Contact 
Wolfgang Wechler, TU Braunschweig, Theo- 
retische Informatik, Postfach 3329, D-3300 
Braunschweig, West Germany, e-mail 
wechler@infbs.uucp; or Helene Kirchner, 
CRIN, BP 239, 54506 Vandoeuvre-les-Nancy 
Cedex, France, e-mail hkirchner@loria.crin.fr. 

Information Technology Conf., Oct. 1-3, 

San Diego, Calif. Sponsor: Data Processing 
Management Assoc. Contact DPMA, 505 
Busse Hwy., Park Ridge, IL 60068, phone 
(708) 825-8124. 

Visual Comm, and Image Processing 90 
Conf., Oct. 1-4, Lausanne, Switzerland. 
Sponsor: Int’l Soc. for Optical Eng, Contact 
SPIE, PO Box 10, Bellingham, WA 98227- 
0010, phone (206) 676-3290, fax (206) 647- 
1445. 


Info.Japan 90, Int’l Conf. on Informa- 
tion Technology, Oct. 1-5, Tokyo. 
Sponsor: Information Processing Soc. of Ja¬ 
pan. Contact InfoJapan 90 Secretariat, c/o 
Simul Int’l, Kowa Bldg. No. 9, 1-8-10 Akasa- 
ka, Minato-ku, Tokyo 107, Japan, phone 81 
(3) 586-8691, fax 81 (3) 583-8336. 

|£jj\ Sixth Int’l Conf. on the Application of 
Standards for Open Systems Inter¬ 
connection, Oct. 2-4, Gaithersburg, Md. Co¬ 
sponsor: Nat’l Inst, of Standards and Technol¬ 
ogy. Contact Brenda Gray, NIST/OSI, Rm. 
B217, Bldg. 225, Gaithersburg, MD 20899, 
phone (301) 975-3664. 


28th Allerton Conf. on Comm., Control, 
and Computing, Oct. 3-5, Monticello, Ill. 
Contact Allerton Conf., c/o Donna J. Brown, 
Univ. of Illinois at Urbana-Champaign, Coor¬ 
dinated Science Lab, 1101 W. Springfield, 
Ave., Urbana, IL 61801, phone (217) 244- 
0581, e-mail djb@uicsl.csl.uiuc.edu. 


Knowledge Eng. Today’s Marketplace II, 
Oct. 3-5, San Francisco. Sponsor: Int’l Assoc, 
of Knowledge Engineers. Contact IAKE, 
Georgetown PO Box 25461, Washington, DC 
20007, phone (301) 231-7826, fax (301) 770- 
4621, e-mail iake@uc780.bitnet. 


yra 1990 IEEE Workshop on Visual Lan- 
guages, Oct. 4-6, Skokie, Ill. Sponsors: 
Univ. of Pittsburgh et al. Contact S.K. Chang, 
Computer Science Dept., Univ. of Pittsburgh, 
Pittsburgh, PA 15260. 


Third Conf. on Computer-Supported Coop¬ 
erative Work, Oct. 7-10, Los Angeles. Spon¬ 
sor: ACM. Contact Tora Bikson, Rand, 1700 
Main St., Santa Monica, CA 90406-2138, 
e-mail tora@rand-unix.org. 


/gjfjjj Frontiers 90, Third Symp. on Fron¬ 
ts' tiers of Massively Parallel Computa¬ 
tion, Oct. 8-10, College Park, Md. Cospon¬ 
sors: Nat'l IEEE Capital Area Chapter, NASA 
Goddard Space Flight Center. Contact Johan¬ 
na Weinstein, Frontiers 90, UMIACS, Univ. 


Ninth Int’l Conf. on Entity-Relationship 
Approach, Oct. 8-10, Lausanne, Switzerland. 
Sponsor: ER Inst. Contact Kathi Hogshead, 
Computer Science Dept., Northern Illinois 
Univ., DeKalb, IL 60115, phone (815) 753- 
6945. 

Working Conf. on Software Eng. in Medi¬ 
cal Informatics, Oct. 8-10, Amsterdam. 
Sponsor: Unisys. Contact Conf. Secretariat, 
Medical Informatics Dept., Erasmus Univ., 

PO Box 1738, 3000 DR, Rotterdam, The 
Netherlands, phone 31 (10) 408-7050, fax 31 
(10) 408-8118, e-mail semi@hroeur51.bitnet. 

First World Conf. on Parallel Computing in 
Eng. and Eng. Education, Oct. 8-12, Paris. 
Cosponsors: IEEE et al. Contact Conf. Secre¬ 
tariat, Microcomputer Unit, 45 Holbom Via¬ 
duct, London, EC IN 2PB, phone 44 (71) 353- 
9841, fax 44 (71) 353-2856. 

34th Meeting of the Human Factors Soc., 
Oct. 8-12, Orlando, Fla.. Sponsor: HFS. Con¬ 
tact HFS, PO Box 1369, Santa Monica, CA 
90406, phone (213) 394-1811, fax (213) 394- 
2410. 

Third UNB Artificial Intelligence Work¬ 
shop, Oct. 9, Fredericton, N.B., Canada. 
Sponsor: Univ. of New Brunswick. Contact 
B.G. Nickerson, School of Computer Science, 
Univ. of New Brunswick, PO Box 4400, Fred¬ 
ericton, N.B., Canada E3B 5A3, phone (506) 
453-4566, fax (506) 453-3566, e-mail bgn@ 
unb.ca. 

Ninth Symp. on Reliable Distributed 
Systems, Oct. 9-12, Huntsville, Ala. 
Contact Raif M. Yanney, TRW, MS DH2/ 
2328, 1 Space Park, Redondo Beach, CA 
90278, phone (213) 764-6033. 

Northcon 90, Oct. 9-11, Seattle. Cosponsors: 
IEEE et al. Contact Northcon 90 Professional 
Program Committee, c/o Ramona Baker, 8110 
Airport Blvd., Los Angeles, CA 90045-3194, 
phone (213) 215-3796, ext. 222. 

PDCS 90, ISMM Int’l Conf. on Parallel and 
Distributed Computing and Systems, Oct. 
10-12, New York City. Sponsor: Int’l Soc. for 
Mini and Microcomputers. Contact R. Am- 
mar, U155, Computer Science and Eng. Dept., 
Univ. of Connecticut, Storrs, CT 06268, fax 
(203) 486-0318. 

EuroForum 90, Oct. 11-12, Daresbury, 
Cheshire, UK. Contact Kate Faulkner, Euro- 
Forum 90, ICL, Manchester M12 5DR, UK 
phone 44 (61) 223-1301, fax 44 (61) 223- 
1207. 


Second Int’l Conf. on Microelectronics, 

Oct. 13-15, Damascus, Syria. Sponsor: Arab 
School of Science and Technology. Contact 
M.I. Elmasry, VLSI Research Group, Univ. of 
Waterloo, Waterloo, Ont., Canada N2L 3G1, 
phone (519) 885-1211, ext. 3753. 


1990 Fall VHDL User’s Group Meet- 
ing, Oct. 14-17, Oakland, Calif. Con¬ 
tact Rachel Rusting, Intermetrics, 733 Con- 


ISA 90, Oct. 14-19, New Orleans. Sponsor: 
Instrument Soc. of America. Contact ISA, 67 
Alexander Dr., PO Box 12277, Research Tri¬ 
angle Park, NC 27709, phone (919) 549-8411, 
fax (919) 549-8288. 

AIPR 19, Workshop on Applied Imagery 
Pattern Recognition, Oct. 17-19, McLean, 
Va. Sponsors: Soc. of Photooptical Instrumen¬ 
tation Engineers, Rome Air Development 
Center. Contact Brian Mitchell, ERIM, PO 
Box 8618, Ann Arbor, MI 48106, phone (313) 
994-1200, ext. 2713. 


12th Saudi Nat’l Computer Conf. on Plan¬ 
ning for the Informatics Soc., Oct. 21-24, 

Riyadh, Saudi Arabia. Cosponsors: King Saud 
Univ., Saudi Computer Soc. Contact Moham¬ 
mad M. Mandurah, College of Computer and 
Information Sciences, PO Box 51178, Riyadh, 
11543, Saudi Arabia, phone 996 (1) 467-6993. 


OOPSLA 90, Fifth Conf. on Object-Orient¬ 
ed Programming Systems, Languages, and 
Applications, Oct. 21-25, Ottawa, Canada. 
Sponsor: ACM. Contact Assoc, for Comput¬ 
ing Machinery, 11 W. 42nd St., New York, 
NY 10036, phone (212) 869-7440. 


FOCS, 31st Foundations of Computer 
Science, Oct. 22-24, St. Louis. Contact 
Christos Papadimitriou, Computer Science 
Dept., Univ. of California at San Diego, La 
Jolla, CA 92093, phone (619) 534-2086. 


Int’l Conf. on Computer Applications in 
Developing Countries, Oct. 22-24, Benin 
City, Nigeria. Sponsor: Large Scale Systems 
Research Group, Univ. of Benin. Contact E.A. 
Onibere, Math, and Computer Science Dept., 
Univ. of Benin, P.M.B. 1154, Benin City, Ni¬ 
geria. 


Ninth Nat’l Conf. on EDP System and Soft¬ 
ware Quality Assurance, Oct. 22-24, Wash¬ 
ington, DC. Sponsor: Data Processing Man¬ 
agement Assoc. Contact US Professional 
Development Inst., EDP System and Software 
Quality Assurance, 1734 Elton Rd„ Suite 221, 
Silver Spring, MD 20903-1733, phone (301) 
445-4400, fax (301) 445-5722. 


JCIT 5, Fifth Jerusalem Conf. on In- 
formation Technology, Oct. 22-25, 

Jerusalem. Sponsor: Information Processing 
Assoc, of Israel. Contact Abraham Peled, IBM 
T.J. Watson Research Center, PO Box 704, 
Yorktown Heights, NY 10598. 


CC 90, Third Int’l Workshop on Compiler 
Compilers, Oct. 22-26, Schwerin, East Ger¬ 
many. Sponsors: German Democratic Repub¬ 
lic Academy of Sciences Inst, of Informatics 
and Computing Technique et al. Contact 
Michael Albinus, CC 90 Organizing Commit¬ 
tee, Akademie der Wissenschaften der DDR, 
Inst, fur Informatik und Rechentechnik, Ru- 
dower Chaussee 5, Berlin, GDR — 1199. 


Third Int’l Symp. on Artificial Intelligence, 
Oct. 22-26, Monterrey, N.L. Mexico. Spon¬ 
sors: Inst. Tecnologico y de Estudios Superi- 
ores de Monterrey et al. Contact Hugo Terash- 
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ima, Centro de Inteligencia Artificial, ITESM, 
Sue. de Correos “J”, C.P. 64849 Monterrey, 
N.L. Mexico, phone 52 (83) 58-2000, fax 52 
(83) 58-0771, e-mail isai@tecmtyvm.bitnet. 

Lecture Series on High-Integrity Systems, 
Oct. 23, Gaithersburg, Md. Sponsor: Nat’l 
Inst, of Standards and Technology. Contact 
Dolores Wallace, NIST, Bldg., B266, Gaith¬ 
ersburg, MD 20899, phone (301) 975-3340, 
e-mail wallace@swe.swe.ncsl.nist.gov. 


Visualization 90, Oct. 23-26, San Fran- 
cisco. Contact Bruce Brown, Oracle 
Corp., 20 Davis Dr„ Belmont, CA 94002, 
phone (415)598-3628. 


10th Int’l Workshop on Distributed Artifi¬ 
cial Intelligence, Oct. 23-27, Bandera, Texas. 
Cosponsors: Am. Assoc, for Artificial Intelli¬ 
gence, MCC. Contact Michael N. Huhns, 
MCC 3500 W. Balcones Center Dr., Austin, 
TX 78759, phone (512) 338-3651. 


ESORICS 90, European Symp. on Research 
in Computer Security, Oct. 24-26, Toulouse, 
France. Sponsor: AFCET. Contact Martin 
Gilles, 16 Para de Diane, 78350 Jouy eu Josas, 
Toulouse Cedex, France. 


First Japanese Knowledge Acquisition for 
Knowledge-Based Systems Workshop, Oct. 
25-26, Kyoto, Japan, and Oct. 29-31, Tokyo. 
Cosponsors: Kansai Inst, of Information Sys¬ 
tems et al. Contact John H. Boose, Advanced 
Technology Center, Boeing Computer Servic¬ 
es 7L-64, PO Box 24346, Seattle, WA 98124, 
phone (206) 865-3253. 


ZSN NACLP 90, 1990 North Am. Conf. on 
Logic Programming, Oct. 28-Nov. 1, 

Austin, Texas. Cosponsor: ACM. Contact 
Carlo Zaniolo, MCC, 3500 W. Balcones Cen¬ 
ter Dr., Austin, TX 78759, phone (512) 338- 
3442. 


Int’l Conf. on Information Technology, 

Oct. 29-31, Bournemouth, UK. Sponsor: Insti¬ 
tution of Electrical Engineers. Contact Conf. 
Services, IEE, Savoy Place, London WC2R 
0BL, UK, phone 44 (71) 240-1871, fax 44 
(71) 240-7735. 

Eighth Pacific Northwest Software Quality 
Conf., Oct. 29-31, Portland, Ore. Sponsor: 
Pacific Northwest Software Quality Conf. 
Committee. Contact Terri Moore, Pacific 
Agenda, PO Box 10142, Portland, OR 97210, 
phone (503) 223-8633. 

ISCIA 5, Fifth Int’l Symp. on Computer 
and Information Sciences, Oct. 30-Nov. 2, 

Cappadocia, Nevsehir, Turkey. Sponsors: 
Istanbul Tech. Univ. et al. Contact A. Emre 
Harmanci, Istanbul Tech. Univ., Bilgi Islem 
Merkezi, Ayazaga, 80626 Istanbul, Turkey, 
phone 090 (1) 176-3254, fax 090 (1) 176- 
1734, e-mail harmanci @tritu.bitnet. 


Compsac 90,14th Int’l Computer 
Software and Applications Conf., Oct. 
31-Nov. 2, Chicago. Contact Ifay F. Chang, 
Rm. 1B28, IBM T.J. Watson Research Center, 
PO Box 714, Yorktown Heights, NY 10598, 
phone (914) 789-7825, fax (914) 784-6211. 


November 1990 


14th SCAMC, 1990 Symp. on Computer 
Applications in Medical Care, Nov. 4-7, 

Washington, DC. Cosponsors: George Wash¬ 
ington Univ. Medical Center et al. Contact 
SCAMC — Office of CEM, George Washing¬ 
ton Univ. Medical Center, 2300 K St. NW, 
Washington, DC 20037, phone (202) 994- 
8928. 


Optcon 90, Applications in Optical Science 
and Eng. Conf., Nov. 4-9, Boston. Cospon¬ 
sors: IEEE Lasers and Electro-Optics Soc. et 
al. Contact SPIE, PO Box 10, Bellingham, 

WA 98227-0010, phone (206) 676-3290, fax 
(206) 647-1445. 

1990 IFIP-IEEE Int’l Workshop on 

Defect and Fault Tolerance in VLSI 
Systems, Nov. 5-7, Grenoble, France. Contact 
Gabriel Saucier, Inst. Nat’l Polytechnique de 
Grenoble/CSI, 46 avenue Felix-Viallet, 38031 
Grenoble Cedex, France, phone (33) 76-57- 
46-87, fax (33) 76-50-23-21; or Tulin E. Man- 
gir, TRW, 1 Space Park, R2/2036, Redondo 
Beach, CA 90278, phone (213) 813-3894, fax 
(213) 813-3709. 

24th Asilomar Conf. on Signals, Systems, 
and Computers, Nov. 5-7, Pacific Grove, Ca¬ 
lif. Sponsors: Naval Postgraduate School et al. 
Contact George M. Dillard, Naval Ocean Sys¬ 
tems Center, San Diego, CA 92152-5000, 
phone (619) 553-2478. 

ICCS 90, Int’l Conf. on Comm. Systems, 
Nov. 5-9, Singapore. Cosponsors: IEEE Sin¬ 
gapore Section et al. Contact ICCS 90, c/o 
Meeting Planners Pte. Ltd., 100 Beach Rd. 
#33-01, Shaw Towers, Singapore 0718. 


Second SIAM Conf. on Linear Algebra in 
Signals, Systems, and Control, Nov. 5-9, San 
Francisco. Contact Soc. for Industrial and Ap¬ 
plied Math., 3600 University City Science 
Center, Philadelphia, PA 19104-2688, phone 
(215) 382-9800, fax (215) 386-7999, e-mail 
siamconfs@wharton.upenn.edu. 


ICCC 90, 10th Int’l Conf. on Computer 
Comm., Nov. 5-9, New Delhi, India. Sponsor: 
Int’l Council on Computer Comm. Contact 
Saroj Chowla, ICCC 90, CMC Ltd., A-5 Ring 
Rd., South Extension Part I, New Delhi 
110049, India, phone 91 (11) 626-807, fax 91 
(11)684-4652. 


Intelligent Robotic Systems: Design and 
Applications, Nov. 6-7, Philadelphia. Spon¬ 
sor: SPIE. Contact Mohan M. Trivedi, Univ. 
of Tennessee, Electrical and Computer Eng., 
Ferris Hall, Knoxville, TN 37996-2100, phone 
(615) 974-5450. 


ACM Conf. on Critical Issues, Nov. 6-7, Ar¬ 
lington, Va. Contact Jim Adams, ACM, 11 W. 
42nd St., New York, NY 10036, phone (212) 
869-7440, fax (212) 869-1228. 


Gomac 90, 1990 Govt. Microcircuit Appli¬ 
cations Conf., Nov. 6-8, Las Vegas. Cospon¬ 
sors: US Defense Dept, et al. Contact Ran¬ 
dolph A. Reitmeyer, USALABCOM, 
Electronics Technology and Devices Lab, 


ATTN: SLCET-I, Ft. Monmouth, NJ 07703- 
5000, phone (201) 544-3465. 


TAI 90, Second Computer Soc. Int’l 
Conf. on Tools for Artificial Intelli¬ 
gence, Nov. 6-9, Washington, DC. Cospon¬ 
sors: Rutgers Univ. et al. Contact Nikolas G. 
Bourbakis, IBM, 5600 Cottle Rd., San Jose, 
CA 95193, phone (408) 270-3455. 


IEEE Workshop on the Management 
of Replicated Data, Nov. 7-9, Houston. 
Sponsor: IEEE Computer Soc. Tech. Commit¬ 
tee on Operating Systems. Contact Luis-Felipe 
Cabrera, IBM Almaden Research Center, 650 
Harry Rd., MC K55/803, San Jose, CA 95120- 
6099, phone (408) 927-1838. 


1990 IEEE Workshop on VLSI Signal Pro¬ 
cessing, Nov. 7-9, San Diego, Calif. Contact 
Patti Fenstermacher, AT&T Bell Labs, 1243 
S. Cedar Crest Blvd., Allentown, PA 18103, 
e-mail psf@aloft.att.com; or Howard S. 
Moscovitz, AT&T Bell Labs, 1243 S. Cedar 
Crest Blvd., Allentown, PA 18103, e-mail 
mosc @ aloft.att.com. 


Int’l Workshop on Network and Operating 
System Support for Digital Audio and Vid¬ 
eo, Nov. 8-9, Berkeley, Calif. Sponsor: Int’l 
Computer Science Inst. Contact Ramesh 
Govindan, ICSI, 1947 Center St., Suite 600, 
Berkeley, CA 94704-1105, phone (415) 642- 
4274, ext. 136, e-mail av-workshop@ 
berkeley.edu. 

Computational Science in Industry and the 
Comprehensive Univ., Nov. 8-10, Pomona, 
Calif. Sponsor: Calif. State Polytechnic Univ. 
at Pomona. Contact Bruce P. Hillam, Comput¬ 
er Science Dept., Calif. State Polytechnic 
Univ., 3801 W. Temple Ave., Pomona, CA 
91768, phone (714) 869-3440. 

Fourth Southeastern Small-College Com¬ 
puting Conf., Nov. 9-10, Hickory, N.C. 
Sponsor: Consortium for Computing in Small 
Colleges. Contact Susan Dean, Samford 
Univ., 800 Lakeshore Dr., Birmingham, AL 
35229, Bitnet stdean@samford.bitnet. 


ICCAD 90, IEEE Int’l Conf. on Com- 
puter-Aided Design, Nov. 12-15, Santa 
Clara, Calif. Cosponsor: IEEE Circuits and 
Systems Soc. Contact MP Associates, 7490 
Clubhouse Rd., Suite 102, Boulder, CO 
80301, phone (303) 530-4562 or 4333. 


Autofact 90, Robots 14, and Vision 90, Nov. 
12-15, Detroit. Cosponsors: Soc. of Manufac¬ 
turing Engineers and SME Machine Vision 
Assoc. Contact SME Conf. Dept., PO Box 
930, Dearborn, MI, phone (313) 271-1500, 
ext. 369. 


Int’l Conf. on Applications of Software 
Measurement, Nov. 12-15, San Diego, Calif. 
Sponsor: Am. Soc. for Quality Control. Con¬ 
tact Software Quality Eng., 3000-2 Hartley 
Rd., Jacksonville, FL 32257, phone (904) 268- 
8639. 


Supercomputing 90, Nov. 12-16, New 

York City. Cosponsor: ACM. Contact 
Joanne L. Martin, IBM T.J. Watson Research 
Center, PO Box 218, Route 134, Yorktown 
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Heights, NY 10598, phone (914) 945-3285, 
e-mailjlmart@ibm.com; or Supercomputing 
90, IEEE Computer Soc., 1730 Massachusetts 
Ave. NW, Washington, DC 20036-1903, 
phone (202) 371-1013. 


Seventh Governor’s Symp. on High 
Technology, Nov. 13-15, Kauai, Ha¬ 
waii. Sponsor: State of Hawaii. Contact Wil¬ 
liam M. Ball, State of Hawaii, 300 Kahelu St., 
Suite 35, Mililani, HI 96789, phone (808) 
625-5293. 


Wescon 90, Nov. 13-15, Anaheim, Calif. Co¬ 
sponsors: IEEE Los Angeles Council, IEEE 
San Francisco Bay Area Council, Electronic 
Representatives Assoc. Contact Wescon 90, 
8110 Airport Blvd., Los Angeles, CA 90045, 
phone (213) 215-3976, fax (213) 641-5117. 


Fall Comdex, Nov. 13-17, Las Vegas. Con¬ 
tact Interface Group, 300 First Ave., Need¬ 
ham, MA 02194, phone (617) 449-6600. 


ftfi) PRICAI 90, Pacific Rim Int’l Conf. 
'Ss on Artificial Intelligence 90, Nov. 14- 

16, Nagoya-shi, Aichi, Japan. Sponsor: Japa¬ 
nese Soc. for Artificial Intelligence et al. Con¬ 
tact Teruo Fukumura, Inter Group Corp., 
Akasaka Yamakatsu Bldg., 8-5-32 Akasaka, 
Minato-ku, Tokyo 107, Japan, phone (03) 
479-5535. 


14th Western Educational Computing 
Conf., Nov. 15-16, Irvine, Calif. Sponsor: 
California Educational Computing Consor¬ 
tium. Contact Oliver Seely, Jr., California 
State Univ. at Dominguez Hills, Chemistry, 
1000 E. Victoria St., Carson, CA 90747. 


AIDA 90, Sixth Conf. on Artificial Intelli¬ 
gence and Ada, Nov. 15-16, Reston, Va. 
Sponsors: George Mason Univ. et al. Contact 
AIDA 90, Computer Science Dept., George 
Mason Univ., 4400 University Dr., Fairfax, 
VA 22030, phone (703) 323-2713, fax (703) 
323-2630, e-mail aida@gmuvax.gmu.edu. 


(giv Third North Carolina Symp. on Arti- 
ficial Intelligence, Nov. 15-16, Re¬ 
search Triangle Park, N.C. Cosponsors: IEEE 
Computer Soc. of Eastern North Carolina et 
al. Contact Connie McElroy-Bacon or Belinda 
Niedwick, Div. for Lifelong Education, North 
Carolina State Univ., Box 7401, Raleigh, NC 
27695-7401, phone (919) 737-2261. 


Cognitiva 90, Nov. 20-23, Madrid. 
Sponsor: AFCET. Contact Cognitiva 
90, c/o Assoc. Francaise pour la Cybemetique 
Economique et Technique, 156 Bd. Pereire, 
75017 Paris, France, phone 33 (1) 4766-2419, 
fax 33 (1)4267-9312. 


Al 90, Australian Joint Artificial Intelli¬ 
gence Conf., Nov. 21-23, Perth, Western Aus¬ 
tralia. Sponsor: Australian Computer Soc. 
Contact Les Kitchen, Univ. of Western Aus¬ 
tralia, Computer Science Dept., Nedlands, 
Western Australia, 6009, phone 61 (9) 380- 
2281, e-mail ai90@wacsvax.oz.au. 


IFIP Workshop on Electronic Design 
Automation Frameworks, Nov. 26-28, 

Charlottesville, Va. Sponsor: Int’l Federation 
for Information Processing. Contact Ron 


Waxman, Univ. of Virginia, Thornton Hall, 
Charlottesville, VA 22903, phone (804) 924- 
6086. 


t&Kl IEEE 1990 Conf. on Software Mainte- 
nance, Nov. 26-29, San Diego, Calif. 
Contact Thomas M. Pigoski, USN, NSGD 
Pensacola, Corry Station, Pensacola, FL 
32511, phone (904) 452-6399. 


NIPS 90, IEEE Conf. on Neural Informa¬ 
tion Processing Systems, Nov. 26-29, Den¬ 
ver. Contact Kathie Hibbard, Eng. Center, 
Univ. of Colorado, Campus Box 425, Boulder, 
CO 80309-0425. 


chitecture, Nov. 27-29, Orlando, Fla. Co¬ 
sponsor: ACM. Contact Chris Papachristou, 
Case Western Reserve Univ., Computer Eng. 
and Science Dept., Cleveland, OH 44106, 
phone (216) 368-5277, e-mail cap@alpha.ces. 
cwru.edu. 


Iecon 90,16th Conf. of the IEEE Industrial 
Electronics Soc., Nov. 27-30, Pacific Grove, 
Calif. Contact Robert Begun, 23609 Skyview 
Terr., Los Gatos, CA 95030, phone (408) 353- 
1560. 

IAPR Workshop on Machine Vision Appli¬ 
cations, Nov. 28-30, Tokyo. Sponsor: Int’l 
Assoc, for Pattern Recognition. Contact Mikio 
Takagi, Inst, of Industrial Science, Univ. of 
Tokyo, 7-22-1 Roppongi, Minatoku, Tokyo 
106, Japan, phone 81 (3) 479-0289, fax 81 (3) 
423-2834, e-mail takagi@tkl.iis.u-tokyo.ac.jp. 


December 1990 


/gfjN First Int’l Symp. on Uncertainty and 
Analysis: Fuzzy Reasoning, Probabi¬ 
listic Methods, and Risk Management, Dec. 
3-5, College Park, Md. Sponsors: Univ. of 
Maryland et al. Contact Bilal M. Ayyub, Civil 
Eng. Dept., Univ. of Maryland, College Park, 
MD 20742, phone (301) 405-1956. 


ACM SIGSoft 90, Fourth Symp. on Soft¬ 
ware Development Environments, Dec. 3-5, 

Irvine, Calif. Sponsor: ACM. Contact De- 
wayne E. Perry, AT&T Bell Labs, 600 Moun¬ 
tain Ave., Murray Hill, NJ 07974, phone (201) 
582-2529. 


Sixth Computer Security Applications 
Conf., Dec. 3-7, Tucson, Ariz. Sponsors: Am. 
Soc. for Industrial Security et al. Contact Mar¬ 
shall D. Abrams, Mitre Corp., 7525 Colshire 
Dr., M/S Z269, McLean, VA 22101, phone 
(703) 883-6938, e-mail abrams@mitre.org. 

Tri-Ada 90, Dec. 3-7, Baltimore. Sponsor: 
ACM. Contact Erhard Ploedereder, Tartan 
Labs, 300 Oxford Dr., Monroeville, PA 
15146, phone (412) 856-3600, fax (412) 856- 
3636, e-mail ploedere@tartan.com or 
ploedere @ ajpo.sei.cmu.edu. 


ICCV 90, Third Int’l Conf. on Com- 
vEx puter Vision, Dec. 4-7, Osaka, Japan. 
Contact ICCV 90, IEEE Computer Soc., 1730 


Massachusetts Ave. NW, Washington, DC 
20036-1903, phone (202) 371-1013. 


SEARCC 90, South East Asia Regional 
Computer Confederation Conf., Dec. 4-8, 

Manila, Philippines. Sponsor: Philippine 
Computer Soc. Contact Victor B. Gruet, Com¬ 
puter Information Systems, CIS Bldg., Meral- 
co Compound, Ortigas Ave., 1602 Pasig, 
Metro Manila, Philippines, phone 63 (2) 722- 
1251, fax 63 (2) 722-0141. 


llth Real-Time Systems Symp., Dec. 
5-7, Orlando, Fla. Sponsor: IEEE Com¬ 
puter Soc. Tech. Committee on Real-Time 
Computing. Contact Doug Locke, IBM — MS 
409, Systems Integration Div., 6600 Rock- 
ledge Dr., Bethesda, MD 20817, phone (301) 
493-1496, e-mail cdl@cs.cmu.edu. 


CASE 90, Fourth Int’l Workshop on 
Computer-Aided Software Eng., Dec. 
5-8, Irvine, Calif. Contact Elliott J. Chikofsky, 
Radius Systems, 75 Lexington St., Burlington, 
MA 01803, phone (617) 494-8200. 

® WSC 90, 1990 Winter Simulation 

Conf., Dec. 9-12, New Orleans. Contact 
Randall P. Sadowski, Systems Modeling 
Corp., 504 Beaver St., Sewickley, PA 15143, 
phone (412) 741-3727. 

Second IEEE Symp. on Parallel and 
Distributed Processing, Dec. 9-13, 

Dallas. Cosponsor: Dallas Chapter of the 
IEEE Computer Soc. Contact Behrooz Shirazi, 
Computer Science Dept., Southern Methodist 
Univ., 6425 Airline Rd., Dallas, TX 75275- 
0122, phone (214) 692-2874, e-mail shirazi* 
smu.uucp@uunet.uu.net. 

/£j^| San Diego Workshop on Volume Vi- 
sualization, Dec. 10-12, La Jolla, Calif. 
Cosponsor: ACM. Contact T. Todd Elvins, 
SDSC, Box 85608, San Diego, CA 92038, 
phone (619) 534-5128. 


ICDT 90, Third Int’l Conf. on Database 
Theory, Dec. 11-15, Paris. Sponsor: INRIA. 
Contact INRIA, Domaine de Voluceau — 
Rocquencourt, BP 105, 78153 Le Chesnay Ce- 
dex, France, phone 33 (1) 3963-5500, fax 33 
(1) 3963-5638. 


Lecture Series on High-Integrity Systems, 
Dec. 17, Gaithersburg, Md. Sponsor: Nat’l 
Inst, of Standards and Technology. Contact 
Dolores Wallace, NIST, Bldg., B266, Gaith¬ 
ersburg, MD 20899, phone (301) 975-3340, 
e-mail wallace@swe.swe.ncsl.nist.gov. 

10th Conf. on Foundations of Software 
Technology and Theoretical Computer Sci¬ 
ence, Dec. 17-19, Bangalore, India. Contact 
Y.N. Srikant, Indian Inst, of Science, Banga¬ 
lore 560 012, India, phone (812) 334-411. 

1990 IEEE Workshop on Languages 

and Architectures for Automation, 
Dec. 19-21, Honolulu. Sponsors: Pacific Int’l 
Center for High Technology Research et al. 
Contact D.Y.Y. Yun, Univ. of Hawaii, 711 
Kapiolani Blvd., Suite 200, Honolulu, HI 
96813-5249, phone (808) 539-1532, fax (808) 
941-1399; or Shi-Kuo Chang, 322 Alumni 
Hall, Univ. of Pittsburgh, Pittsburgh, PA 
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15260, phone (412) 624-8493, fax (412) 624- 
8465, e-mail chang@vax.cs.pitt.edu. 

Seventh Israeli Conf. on Artificial Intelli¬ 
gence and Computer Vision, Dec. 26-27, Tel 

Aviv, Israel. Contact A. Bruckstein, Faculty 
of Computer Science, Technion, 32000 Haifa, 
Israel, e-mail freddy@techsel.bitnet; or 
Shmuel Peleg, David Samoff Research Cen¬ 
ter, CN 5300, Princeton, NJ 08543-5300, 
phone (609) 734-2284, e-mail peleg@vision. 
sarnoff.com. 


January 1991 


Fourth CSI/IEEE Int’l Symp. on 
viz VLSI Design, Jan. 5-8, New Delhi, In¬ 
dia. Sponsors: Computer Soc. of India et al. 
Contact Yashwant K. Malaiya, Computer Sci¬ 
ence Dept., Colorado State Univ., Fort Col¬ 
lins, CO 80523, phone (303) 491-7031, fax 
(303) 491-2293, e-mail malaiya@ravi.cs. 
colostate.edu; or D. Roy Chowdhury, Gate¬ 
way Design Automation, SDF#A-1, Noida Ex¬ 
port Processing Zone, PO NEPZ, Noida 
201305, India, phone 91 (05736) 62342, fax 
91 (05736) 62343. 


SIAM Workshop on Automatic Differentia¬ 
tion of Algorithms, Jan. 7-9, Breckenridge, 
Colo. Contact Soc. for Industrial and Applied 
Math., Conf. Coordinator, Dept. CC0590, 
3600 University City Science Center, Phila¬ 
delphia, PA 19104-2688, phone (215) 382- 
9800, fax (215) 386-7999, e-mail siamconfs@ 
wharton.upenn.edu. 


Int’l Workshop on Formal Methods 
viz in VLSI Design, Jan. 9-11, Puerto 
Rico. Cosponsors: ACM, IFIP. Contact P.A. 
Subrahmanyam, Rm. 4E-530, AT&T Bell 
Labs, Holmdel, NJ 07733, phone (201) 949- 
5812, fax (201) 949-3697, e-mail subra@ 
vaxl35.att.com. 


Int’l Conf. on Multimedia Informa- 
viz tion Systems, Jan. 16-18, Singapore. 
Contact Juzar Motiwalla, Inst, of Systems Sci¬ 
ence, Nat’l Univ. of Singapore, Heng Mui 
Keng Terr., Kent Ridge, Singapore 0511, 
phone (65) 772-2075. 


Int’l Workshop on Unix-Based Software 
Development Environments, Jan. 16-18, 

Dallas. Sponsor: Usenix Assoc. Contact Use- 
nix Conf. Office, 22672 Lambert St., Suite 
613, El Toro, CA 92630, phone (714) 588- 
8649. 


Conf. on Optics, Electro-Optics, and Laser 
Applications in Science and Eng., Jan. 20- 

25, Los Angeles. Sponsor: Int’l Soc. for Opti¬ 
cal Eng. Contact SPIE, PO Box 10, Belling¬ 
ham, WA 98227-0010, phone (206) 676-3290, 
fax (206) 647-1445. 


PADS, Workshop on Parallel and 
viz Distributed Simulation, Jan. 21-23, 

Anaheim, Calif. Cosponsors: ACM, SCS. 
Contact David M. Nicol, Computer Science 
Dept., College of William and Mary, Wil¬ 
liamsburg, VA 23185, phone (804) 221-3458, 
e-mail nicol@cs.wm.edu. 


Second ACM-SIAM Symp. on Discrete Al¬ 
gorithms, Jan. 28-30, San Francisco. Contact 
SIAM Conf. Coordinator, Dept. CC0590, 
3600 University City Science Center, Phila¬ 
delphia, PA 19104-2688, phone (215) 382- 
9800, fax (215) 386-7999, e-mail siamconfs@ 
wharton.upenn.edu. 


® IEEE Int’l Conf. on Wafer Scale Inte¬ 
gration, Jan. 29-31, San Francisco. Co¬ 
sponsors: IEEE Components, Hybrids, and 
Manufacturing Technology Soc. Contact Ter¬ 
ry Chappell, 730 Encino Dr., Aptos, CA 
95003, phone (408) 662-1936; or R. Mike 
Lea, Brunei Univ., Uxbridge UB8 3PH, UK, 
phone (44) 895-74000, ext. 2821, fax (44) 
895-58728, e-mail mike.lea@brunel.ac.uk. 


February 1991 


Systems/USA Technology Conf., Feb. 11-13, 

Anaheim, Calif. Sponsor: Am. Electronics As¬ 
soc. Contact AEA, 5201 Great America 
Pkwy., Santa Clara, CA 95054, phone (503) 
359-5873 or (408) 987-4204, fax (503) 357- 
3839 or (408) 970-8565. 


Fifth Int’l Conf. on Modeling Techniques 
and Tools for Computer Performance Eval¬ 
uation, Feb. 13-15, Torino, Italy. Contact 
Maria Carla Calzarossa, Dip. di Informatica e 
Sistemistica, Univ. di Pavia, Via Abbiategras- 
so, 209, 27100 Pavia, Italy, phone 39 (382) 
391-350, fax 39 (382) 422-881, e-mail mcc@ 
ipvpel.infn.it. 


ISSCC 91,1991 IEEE Int’l Solid-State Cir¬ 
cuits Conf., Feb. 13-15, San Francisco. Spon¬ 
sors: IEEE Solid-State Circuits Council et al. 
Contact Diane Suiters, Courtesy Associates, 
655 15th St. NW, Suite 300, Washington, DC 
20005, phone (202) 639-4255. 


CAIA 91, Seventh IEEE Conf. on Ar- 
viz tificial Intelligence Applications, Feb. 
24-28, Miami Beach, Fla. Contact IEEE Com¬ 
puter Soc., 1730 Massachusetts Ave. NW, 
Washington, DC 20036-1903, phone (202) 
311-1013. 


EDAC 91, European Design Automa- 
viz tion Conf., Feb. 25-28, Amsterdam. 
Sponsor: Institution of Electrical Engineers. 
Contact Secretariat, EDAC 91, CEP Consult¬ 
ants, 26-28 Albany St., Edinburgh EH1 3QH, 
Scotland, phone 44 (31) 557-2478, fax 44 (31) 
537-5749. 


tgfjt Compcon Spring 91, Feb. 25-Mar. 1, 

viz San Francisco. Contact Compcon 
Spring 91, IEEE Computer Soc., 1730 Massa¬ 
chusetts Ave. NW, Washington, DC 20036- 
1903, phone (202) 371-1013. 


March 1991 


Fifth Int’l Workshop on High-Level 
viz Synthesis, Mar. 3-6, Buhlerhohe, West 
Germany. Cosponsors: IEEE et al. Contact 
Raul Camposano, IBM T.J. Watson Research 


Center, PO Box 218, Yorktown Heights, NY 
10598, phone (914) 945-3871, e-mail raulc@ 


Fourth Computer Virus and Security 
'<45' Conf., Mar. 14-15, New York City. 
Sponsor: Data Processing Management Assoc. 
Financial Industries. Contact Judy S. Brand, 
PO Box 6313, FDR Station, New York, NY 
10150, phone (800) 835-2246. 

Symp. on Experiences with Distribut- 
vAz ed and Multiprocessor Systems, Mar. 
21-22, Atlanta. Sponsor: Usenix Assoc. Con¬ 
tact George Leach, AT&T Paradyne, MS LG- 
129, PO Box 2826, Largo, FL 34649-2826, 
phone (813) 530-2376, e-mail reggie@pdn. 
paradyne.com. 


April 1991 

/£ij\ Dasfaa 91, Second Int’l Symp. on Da- 
viz tabase Systems for Advanced Appli¬ 
cations, Apr. 2-4, Tokyo. Sponsor: Informa¬ 
tion Processing Soc. of Japan. Contact Yahiko 
Kambayashi, Computer Science Dept., Ky¬ 
ushu Univ., 6-10-1 Hakozaki, Higashi Fukuo¬ 
ka 812, Japan, phone 81 (92) 641-1101, ext. 
5407; or Yoshifumi Masunaga, Univ. of Li¬ 
brary and Information Science, 1-2 Kasuga, 
Tsukuba, Ibaraki 305, Japan, phdne 81 (298) 
52-0511, ext. 340, fax 81 (298) 52-4326, 
e-mail masunaga@ulis.ac.jp. 


IEEE Infocom 91, Conf. 6n Computer 
Comm., Apr. 7-11, Miami, Fla. Co¬ 
sponsors: IEEE Computer Soc. and Comm. 
Soc. Contact N. Shacham, IEEE Infocom 91, 
SRI Int’l, 333 Ravenswood Ave., Menlo Park, 
CA 94025, phone (415) 859-5710, e-mail 
shacham@sri.com. 

IMS 91, First IEEE Int’l Workshop 
viz on Interoperability in Multidatabase 
Systems, Apr. 8-9, Kyoto, Japan. Contact 
Ahmed K. Elmagarmid, Purdue Univ., Com¬ 
puter Sciences Dept., West Lafayette, IN 
47907, phone (317) 494-1998; or Yutaka Mat¬ 
sushita, Instrumentation Dept., Keio Univ., 
Hiyoshi, Yokohama, Japan, phone 81 (44) 63- 
1141, ext. 3564. 


ASPLOS 4, Fourth Int’l Conf. on Ar- 
V5Z chitectural Support for Programming 
Languages and Operating Systems, Apr. 8- 

11, Santa Clara, Calif. Sponsor: ACM. Con¬ 
tact Bob Rau, Hewlett-Packard Labs, 1501 
Page Mill Rd„ Bldg. 3U, Palo Alto, CA 
94304, fax (415) 857-8558, e-mail rau@ 
hplabs.hp.com. 

/£fj\ Seventh Int’l Conf. on Data Eng., 
Apr. 8-12, Kobe, Japan. Contact Ming 
T. (Mike) Liu, Computer and Information Sci¬ 
ence Dept., Ohio State Univ., 2036 Neil Ave., 
Columbus, OH 43210-1277, phone (614) 292- 
1837, e-mail liu@cis.ircc.ohio-state.edu; or 
Data Eng. 91, IEEE Computer Soc., 1730 
Massachusetts Ave. NW, Washington, DC 
20036-1903, phone (202) 371-1013, fax (202) 
728-0884. 


September 1990 
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Ninth IEEE VLSI Test Symp., Apr. 
vl? 16-18, Atlantic City, N.J. Cosponsor: 
IEEE Philadelphia Section. Contact Mukund 
Modi, Naval Air Eng. Center, ATE Software 
Center, Code: 52514, Lakehurst, NJ 08733, 
phone (201) 323-7002, fax (301) 323-7445. 

ETC 91, 1991 European Test Conf., 
Apr. 16-19, Munich, West Germany. 
Sponsor: VDE (Zentralstelle Tagungen und 
Seminare). Contact Peter Stilke, VDE, Strese- 
mannallee 15, D-6000 Frankfurt 70, West 
Germany, phone (69) 6308-203, fax (69) 
6308-273. 

CHDL 91, 10th Int’l Symp. on Com- 
puter Hardware Description Lan¬ 
guages and their Applications, Apr. 22-24, 

Marseille, France. Cosponsors: Int’l Federa¬ 
tion for Information Processing et al. Contact 
Dominique Borrione, Imag/Artemis, BP 53X, 
38041 Grenoble Cedex, France, phone (33) 
7651-4604, ext. 5240, fax (33) 7651-9637, 
e-mail borrione@imag.imag.fr. 

Second Int’l Conf. on Systems Inte- 
VS7 gration, Apr. 22-25, Morristown, N.J. 
Cosponsors: New Jersey Inst, of Technology 
et al. Contact Peter A. Ng, Computer and In¬ 
formation Science Dept., New Jersey Inst, of 
Technology, University Heights, Newark, NJ 
07102, phone (201) 596-3387, e-mail ng_p@ 
vienna.njit.edu. 

NCGA 91,1991 Nat’l Computer Graphics 
Assoc. Conf., Apr. 22-25, Chicago. Contact 
NCGA, 2722 Merrilee Dr., Suite 200, Fairfax, 
VA 22031, phone (703) 698-9600. 

CHI 91,1991 Conf. on Human Fac- 
tors in Computing Systems, Apr. 27- 

May 2, New Orleans. Sponsor: ACM. Contact 
Keith Butler, Boeing, Advanced Technology 
Center, PO Box 24346, M/S 7L-64, Seattle, 
WA 98124, phone (206) 865-3389; or June 
Davis, 13 Annapolis St., Annapolis, MD 
21401, phone (301)269-6801. 

Int’l Conf. on Cognitive Sciences, 
Apr. 29-May 2, Montreal. Cosponsors: 
AFCET et al. Contact Gilles Gauthier, Math, 
and Computer Science Dept., Univ. of Que¬ 
bec, PO Box 8888, Station A, Montreal, Que., 
Canada H3C 3P8, phone (514) 987-8212, fax 
(514) 987-8477. 


17, Bologna, Italy. Cosponsors: IEEE Region 
8 et al. Contact Vito Monaco, Dip. Eletronica 
Informatica E Sistemistica, Univ. Di Bologna, 
Viale Risorgimento, 1-60136, Bologna, Italy. 

CCW 91, Third IEEE Conf. on Com- 
*^§7 puter Workstations, May 15-17, Fal¬ 
mouth, Mass. Sponsor: IEEE Computer Soc. 
Tech. Committee on Operating Systems. Con¬ 
tact Luis-Felipe Cabrera, IBM Almaden Re¬ 
search Center, MC K55/801, 650 Harry Rd„ 
San Jose, CA 95120-6099, phone (408) 927- 
1838, e-mail cabrera@ibm.com; or Kenneth 
Kane, Boston Development Center, Sun Micr¬ 
osystems, 2 Federal St., Billerica, MA 01802, 
phone (508) 671-0367, e-mail kkane@east. 


Int’l Symp. on Software Reliability 
'5*?' Eng., May 17-18, Austin, Texas. Co¬ 
sponsors: IEEE Computer Soc. Tech. Com¬ 
mittee on Software Eng. and the Nat’l Aero¬ 
nautics and Space Administration. Contact 
John C. Munson, Computer Science Div., 
Univ. of West Florida, Pensacola, FL 32514, 
phone (904) 474-2989, e-mail jmunson@ 
dcsnet.uwf.edu. 

ICDCS 91,11th Int’l Conf. on Dis- 
tributed Computing Systems, May 
20-24, Arlington, Texas. Contact Bill D. Car- 
roll, Computer Science Eng. Dept., Univ. of 
Texas at Arlington, Box 19015, Arlington, TX 
76019-0015, phone (817) 273-3785, e-mail 
carroll@evax.ari.utexas.edu. 

SESAW, Fourth Software Eng. Stan- 
dard Application Workshop, May 21- 

23, San Diego, Calif. Contact Vera V. Edel- 
stein, Nynex, 500 Westchester Ave., White 
Plains, NY 10604, phone (914) 683-2888. 

ISCA 18,18th Int’l Symp. on Com- 
puter Architecture, May 26-30, 

Toronto. Cosponsor: ACM. Contact K.C. 
Smith, Univ. of Toronto, Electrical Eng. 

Dept., Toronto, Ont. M5S 1A4, Canada, 
phone (416) 978-5033. 

Fifth Israel Conf. on Computer Sys- 
terns and Software Eng., May 28-29, 

Herzlia, Israel. Sponsors: IEEE Computer 
Soc. Israeli Chapter et al. Contact M. Wino- 
kur, c/o ORTRA, PO Box 50432, Tel Aviv 
61500, Israel, phone 972 (3) 664-825, fax 972 
(3) 660-952. 


Contact Shahriar Negahdaripour, Electrical 
Eng. Dept., Univ. of Hawaii at Manoa, 2540 
Dole St., Honolulu, HI 96822, e-mail 
shahriar@wiliki.eng.hawaii.edu. 

|£|^| SCM 3, Third Int’l Software Configu- 
ration Management Workshop, June 
12-14, Trondheim, Norway. Cosponsors: 
ACM, et al. Contact Reidar Conradi, Comput¬ 
er Systems and Telematics Div., Norwegian 
Inst, of Technology, N-7034 Trondheim, Nor¬ 
way, phone 47 (7) 593-444; or Peter Feiler, 
Software Eng. Inst., Carnegie Mellon Univ., 
Pittsburgh, PA 15213-3890, phone (412) 268- 
7790, e-mail phf@sei.cmu.edu. 

DAC 91, 28th ACM/IEEE Design Au- 
tomation Conf., June 16-21, San Fran¬ 
cisco. Cosponsor: ACM. Contact MP Associ¬ 
ates, 7490 Clubhouse Rd., Suite 102, Boulder, 
CO 80301, phone (303) 530-4333. 

/£3i| FTCS 21, 21st Int’l Symp. on Fault- 
Tolerant Computing, June 25-27, 

Montreal. Sponsor: IEEE Computer Soc. 

Tech. Committee on Fault-Tolerant Comput¬ 
ing. Contact Vinod K. Agarwal, McGill Univ., 
Electrical Eng. Dept., 3480 University St„ 
Montreal, Que., Canada H3A 2A7, phone 
(514) 398-7136, fax (514) 398-4470, e-mail 
agarwal@spock.ee.mcgill.ca. 

Arith 10, 10th Symp. on Computer 
Arithmetic, June 26-28, Grenoble, 
France. Cosponsors: ACM et al. Contact Jean- 
Michel Muller, Lab. LIP-IMAC, Ens. Lyon, 
69364 Lyon Cedex 07, France, phone 33 (72) 
72-8229. 


July 1991 


CAR 91, Fifth Int’l Symp. on Com- 
puter-Assisted Radiology, July 3-6, 

Berlin. Sponsor: Tech. Univ. Berlin. Contact 
Heinz U. Lemke, Inst, for Tech. Computer 
Science, Sekr CG-FR3-3, Franklinstrasse 28- 
29, D-1000, Berlin 10, Germany, phone 49 
(30) 314-73100; or Michael H. Rhodes, Toshi¬ 
ba America MRI, 280 Utah Ave., South San 
Francisco, CA 94080, phone (415) 875-2909. 


May 1991 


June 1991 


ICSE 13,13th Int’l Conf. on Software 
Eng., May 13-17, Austin, Texas. Co¬ 
sponsor: ACM. Contact ICSE 13, Bryan Fu¬ 
gate, MCC, 3500 W. Balcones Center Dr., 
Austin, TX 78759-6509, phone (512) 338- 
3330; MCC, PO Box 200015, Austin, TX 
78720-0015; or ICSE 13, IEEE Computer 
Soc., 1730 Massachusetts Ave. NW, Washing¬ 
ton, DC 20036-1903, phone (202) 371-1013. 

CompEuro 91, IEEE Int’l Conf. on 
Advanced Computer Technology, Re¬ 
liable Systems, and Applications, May 13- 


Fourth Int’l Conf. on Industrial and 
Eng. Applications of Artificial Intelli¬ 
gence and Expert Systems, June 2-5, Kauai, 
Hawaii. Sponsors: ACM et al. Contact Moonis 
Ali, Univ. of Tennessee Space Inst., MS15, 
B.H. Goethert Pkwy., Tullahoma, TN 37388- 
8897, phone (615) 455-0631, ext. 236, fax 
(615) 454-2354, e-mail alif@utsivl.bitnet. 

CVPR 91, IEEE Computer Soc. Conf. 
on Computer Vision and Pattern Rec¬ 
ognition, June 3-7, Lahaina, Maui, Hawaii. 


September 1991 

17th Int’l Conf. on Very Large Data 
Bases, Sept. 3-6, Barcelona, Spain. 
Sponsors: IEEE Computer Soc. Tech. Com¬ 
mittee on Data Eng. et al. Contact Guy Loh- 
man, IBM Almaden Research Center, 650 
Harry Rd., San Jose, CA 95120, e-mail 
lohman@ibm.com. 

/fljt Compsac 91,15th Int’l Computer 
Software and Applications Conf., 
Sept. 11-13, Tokyo. Cosponsor: Information 
Processing Soc. of Japan. Contact Stephen S. 
Yau, Univ. of Florida, CIS Dept., Rm. 301, 
Gainesville, FL 32611, phone (904) 335-8006. 
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The Second IEEE Symposium on 

Parallel and Distributed Processing 


Sponsored by: 

IEEE Computer Society 
IEEE Dallas Section 

In-cooperation with: 

Southern Methodist University 
University of Texas at Dallas 

December9-13,1990 - Colony Parke Hotel, Dallas, Texas 

This symposium provides a forum for the presentation and exchange of current work on a wide 
variety of topics in parallel and distributed processing including: 




- Computer Architecture 

- Al Technologies 

- Neural Network 

- VLSI System Design 


- Programming Languages 

- Operating Systems 

- Computer Applications 

- Graphics 


- Data- & Knowledge-bases 

- Parallel Algorithms 

- Networks & Communication 

- Simulation 


TUTORIALS 

T1: Dec. 9: Future of Supercomputing - Next Decade & Beyond, Stephen Lundstrom, PARS A. 
T2: Dec. 9: The Workstation/Server Model of Distributed Computing, Milan Milenkovic, IBM. 

T3: Dec. 13: Parallel/Distributed Architectures for Data/knowledge Based Systems, AH R. Hurson, 
Pennsylvania State University. 

T4: Dec. 13: Distributed Database Operating Systems: Architectures and Issues in Integration, M. 
Tamer Ozsu, University of Alberta. 

Hotel Reservations: Please place your reservations directly with Colony Parke Hotel, 6060 North 
Central Expressway, Dallas, TX 75206, Tel (800)527-1808, in Texas call (800)441-9258. You must 
mention the symposium (SPDP) in order to receive the special symposium rates ($54/night - single 
room, $64/night - double room). Reservations should be made before November 25, 90. After 
this date, reservations are subject to room availability. 


Please send registration form and payment to: Dr. Sajal K. Das, Department of Computer Science, 
P.O. Box 13886, University of North Texas, Denton, TX 76203. Tel (817)565-4256, FAX (817)565-2599. 

Symposium or Tutorial Fees (Advance Registration: Before 11/25/90) 


IEEE Members.Advance US$140, On-site US$170 

Non-IEEE Members.Advance US$175, On-site US$220 

Students.Advance US$60, On-site US$75 

IEEE No.:_ Symposium:_ 

Tutorial: _, specify choice of tutorial 

Student ID No.:_ Total: _ 


Last Name First Name Initial 


Organization 


_Check or bank draft enclosed 
(payable to SPDP) 

Credit Card 

(VISA or Master Card ONLY) 


Address 


City, State, Zip/Country 
Telephone and E-mail address 


VISA No.:_ 

Master Card No.:. 

Expiration Date:_ 
























CAREER OPPORTUNITIES 


RATES: $12.00 per line, (ten lines mini¬ 
mum). Average five typeset words per 
line, eight lines per column inch. Add 
$10 for box number. Send copy at least 
one month prior to publication date to: 
Marian B. Tibayan, Classified Adver¬ 
tising, COMPUTER Magazine, 10662 
Los Vaqueros Circle, PO Box 3014, 
Los Alamitos, CA 90720-1264; (714) 
821-8380; fax (714) 821-4010. 

In order to conform to the Age Discrimina¬ 
tion in Employment Act and to discourage 
age discrimination, COMPUTER may re¬ 
ject any advertisement containing any of 
these phrases or similar ones: "...recent 
college grads...," "...1-4 years maximum 
experience...," "...up to 5 years experi¬ 
ence," or "...10 years maximum 
experience." COMPUTER reserves the 
right to append to any advertisement, with- 
out specific notice to the advertiser, 
"Experience ranges are suggested mini¬ 
mum requirements, not maximums." 
COMPUTER assumes that, since advertis¬ 
ers have been notified of this policy in 
advance, they agree that any experience re¬ 
quirements, whether stated as ranges or 
otherwise, will be construed by the reader 
as minimum requirements only. 


MASSACHUSETTS INSTITUTE 
OF TECHNOLOGY 
Faculty Position in 
Human/Computer Interaction 

The Department of Electrical Engineering 
and Computer Science seeks a faculty mem¬ 
ber, either senior or junior, working in the 
general area of human/computer inter¬ 
action. This position is a professorship newly 
endowed by the MIT X Consortium. Spe¬ 
cializations that are consistent with the 
domain of the search include user interfaces, 
broadly defined to include interface lan¬ 
guages and models, human interaction with 
computational phenomena, computer input 
and output systems and visualization. Facul¬ 
ty duties include teaching at both the under¬ 
graduate and graduate levels, research, and 
supervision of theses. 

All candidates should write to the address 
below, describing their professional interests 
and goals. Applications should include a cur¬ 
riculum vitae and the names and addresses 
of three or more references. Additional 
material describing the applicant’s work, 
such as papers or technical reports, would 
also be helpful. All candidates should in¬ 
dicate citizenship and, in the case of non-US 
citizens, describe their visa status. 

Send all applications to: 

Prof. F.C. Hennie 
Room 38-435 

Massachusetts Institute of Technology 
Cambridge, MA 02139 
M.I.T. is an equal opportunity/affirmative 
action employer. 


UNIVERSITY OF PITTSBURGH 

Department of Computer Science 

The Department of Computer Science in¬ 
vites applications for one or more tenure- 
track faculty positions at the assistant pro¬ 
fessor level areas of interest are Systems, 
Data Base, and Artificial Intelligence. The 
starting date will be September 1, 1991. 
Responsibilities include research, supervi¬ 
sion of graduate student research (Ph .D. and 
M.S.), and graduate and undergraduate 
teaching. Candidates should have a Ph.D. in 
computer science and a strong interest in 
both research and teaching. 

The Department currently has twenty- 
three full-time faculty members and supports 
strong graduate and undergraduate pro¬ 
grams. Departmental resources include an 
excellent research library and extensive com¬ 
puting facilities including a network of SUN 
and Xerox 1100-series (Dandelion) worksta¬ 
tions, a VAX 11/780 (under BSD UNIX), 
an Intel iPSC/2 hypercube, a variety of 
micro-computers, and several graphics sys¬ 
tems. The research systems are accessible 
via the Department's Ethernet-compatible 
LAN. Convenient access is also provided to 
the extensive general computer facilities of 
the University as well as to other networks 
(e.g., ARPANET, CSNET). The Depart¬ 
ment operates the Center for Parallel, 
Distributed and Intelligent Systems (CPDIS) 
to provide an environment for innovative 
research in computer science. Since the Uni¬ 
versity of Pittsburgh is a founding member of 
the Pittsburgh Supercomputing Center and 
an affiliate member of the Software Engi¬ 
neering Institute, the Department of Com¬ 
puter Science has access to the Cray 
X-MP/48 of PSC and the software engi¬ 
neering expertise at SEI. 

Please send your resume to: Dr. Rami 
Melhem, Chair of Faculty Search, Depart¬ 
ment of Computer Science, University of 
Pittsburgh, Pittsburgh, PA 15260. 

Pitt is an equal opportunity/affirmative ac¬ 
tion employer and especially encourages 
women and members of ethnic minorities to 
apply. 


THE UNIVERSITY OF MINNESOTA 
TWIN CITIES 
Head of the Department of 
Computer Science 

The University of Minnesota, Twin Cities, 
invites applications and nominations for 
Head of the Department of Computer Sci¬ 
ence. The Head is responsible for providing 
leadership and helping to focus the intel¬ 
lectual, research, and educational directions 
of the Department, for representing the 
Department’s interests on campus and to ex¬ 
ternal constituencies, for planning and over¬ 
seeing the development of its academic pro¬ 
grams and its research activities, and for the 
administration of the Department, reporting 
to the Dean of the Institute of Technology. 

Minimum qualifications: an earned doc¬ 
torate, a record of teaching and research 
commensurate with appointment as a tenured 


full professor in the Department, demon¬ 
strated ability to work effectively with faculty, 
staff, students, alumni, and the industrial 
community, an ability to articulate effectively 
the Department’s missions, and a commit¬ 
ment to affirmative action, equal opportuni¬ 
ty, and cultural diversity. Desired qualifica¬ 
tions include significant academic leadership 
experience at a research university. 

Send nominations or letter of application, 
cv, and names of three references by 15 
November 1990 to: 

Computer Science Search Committee 
117 Pleasant St., SE, Suite 103 
University of Minnesota 
Minneapolis, MN 55455 
The University of Minnesota is an equal 
opportunity educator and employer and 
specifically encourages applications from 
women and minorities. 


HIGH TECH RESOURCES 
ADMINISTRATOR 

Chicago Research & Trading Group, Ltd. 
(CRT) is the world’s largest options trading 
firm. CRT is known mainly for the advanced 
technology it uses to support its world-wide 
trading and clearing systems and for its 
unique work climate which has kept attrition 
rates close to zero even during the last 6 
years of substantial growth. 

We have one of the largest workstation 
networks in the world. Hundreds of Apollo 
workstations are already installed in our 
world-wide trading network in sites such as 
Chicago, New York, London and Tokyo. 

This Apollo Domain network is also linked 
to PC networks, Data General super-minis, 
System 36s and AS/400s. All of these are 
connected through an advanced world-wide 
communications network with wide-band 
circuits. 

We have need for a High Tech Re¬ 
sources Administrator who will work 
with traders, applications builders, opera¬ 
tions engineers and vendor personnel to 
define problems with applications, networks, 
protocols, users and anything else that 
makes sense to investigate. The successful 
candidate will be the focal point for all 
technical problems and their proposed 
solutions. 

Several years experience in local area net¬ 
works, data communications and real-time 
applications with a corresponding under¬ 
standing of workstation hardware are 
required. 

If you have the right qualifications and 
you’d like to work at a place where work is 
fun and not just a job, then send a resume 
and cover letter to: 

Gerry Duffy 

Executive Vice President 

Chicago Research & Trading Group, 
Ltd. 

440 S. LaSalle St. 

Suite 3300 

Chicago, IL 60605 

Salary is based on what you contribute. 
CRT pays for all benefits, including health, 
life, disability and pension. 


136 


COMPUTER 
















PURDUE UNIVERSITY 
Computer Engineering Faculty Positions 

The School of Electrical Engineering at 
Purdue University seeks outstanding can¬ 
didates in all areas of Computer Engineering 
for research and teaching. Openings are for 
tenure-track faculty at all levels. Active 
research areas include artificial intelligence 
and expert systems; computer communica¬ 
tions networks; computer vision; design 
automation tools; digital signal processor 
system design; distributed algorithms and 
databases; fault-tolerant and testable com¬ 
puting; microprocessor design; natural lan¬ 
guage processing; neural networks; parallel 
processing (architecture, algorithms, operat¬ 
ing systems, compiling, languages, inter¬ 
connection networks, and performance); 
robot vision, sensors and control; software 
engineering; speech processing; and VLSI 
architecture. 

The School has 69 full-time faculty (25 in 
Computer Engineering) and over $9 million 
in funded research projects. In addition to 
the PhD, MSEE and BSEE degrees, the 
School offers a BSCEE (Bachelor of Science 
in Computer and Electrical Engineering) 
which is accredited in both computer engi¬ 
neering and electrical engineering. Comput¬ 
ing facilities available to the faculty include 
the Engineering Computer Network (includ¬ 
ing 10 VAX 11/780’s running UNIX BSD 
4.3, 1 Gould PN 9080, 4 Gould NP l’s, a 
CCI PN 6/32, and 400 Sun workstations), 
the Computing Center’s Cyber-205 and 
ETA-10 supercomputers, a Symbolics LISP 
machine, an IBM 3090/180E, extensive 
graphics facilities, and numerous PC’s. 
Parallel computing facilities include a 
128-node Ncube hypercube, a 48x48 
processor NCR-GAPP processor array, an 
82-processor AT&T Pixel Machine, a 16- 
processor Transputer array, the 30-proces¬ 
sor PASM Parallel Processor prototype that 
was developed and built at Purdue, and the 
Computing Center’s 4 Sequent Symmetry 
S81. Custom VLSI chip design facilities in¬ 
clude Mentor Graphics software running on 
Apollo Workstations. Equipment in the 
Robot Vision Lab and Computer Vision and 
Image Processing Lab includes a Puma 762 
robot, a Cincinnati Milacron T3-726 robot, a 
K2A Cybermation mobile robot. Image pro¬ 
cessing systems include Gould/DeAnza, 
Comtal, Grinnell, Imaging Technologies. 

Applicants must possess a doctorate 
degree. Send a resume, including a state¬ 
ment of teaching and research interests and 
a list of three (3) references, to: Head, 
School of Electrical Engineering, Purdue 
University, West Lafayette, IN 47907. Pur¬ 
due University is an Equal Opportunity/Af¬ 
firmative Action employer. 


SUNY AT BUFFALO 
Image Scientist 

Research Scientist with B.S./M.S. in 
Computer Science/Engineering with 3 years 
experience in document image processing, 
UNIX and C-programming. 

Salary of $24,000-$27,000. Apply to 
LDIU/CS, 226 Bell Hall, SUNY-Buffalo, 
NY 14260. SUNY-Buffalo is an EO/AA 
employer. 


CONCORDIA UNIVERSITY 

The Department of Computer Science in¬ 
vites application for an assistant professor 
position in the area of VLSI systems architec¬ 
ture. The position carries a one-year limited 
term appointment initially but strong possi¬ 
bilities exist that it will become probationary 
tenure-track position. Research activities in 
this area in the Department include delay- 
insensitive (self-timed) systems and high- 
performance ULSI-based multithreaded sys¬ 
tem architectures. Applicants should have a 
recent Ph.D. in the relevant areas. Salary 
and benefits are attractive and negotiable. 
The Department currently has 26 full-time 
professors. It offers both undergraduate and 
graduate programs up to the Ph.D. level 
with an enrollment of over 1000 students. 
The language of instruction is English. The 
Department and the University have excel¬ 
lent research and teaching facilities, and sup¬ 
port staff. 

Apply giving resume and names of at least 
three references to: Dr. T. D. Bui, Chair¬ 
man, Department of Computer Science, 
Concordia University, 1455 de Maison- 
neuve Blvd. West, Montreal, Quebec H3G 
1M8, Canada. 

In accordance with Canadian Immigration 
requirements, priority will be given to Cana¬ 
dian citizens and permanent residents of 
Canada. 


THE UNIVERSITY OF TEXAS 
AT DALLAS 
Faculty Positions 

The Computer Science Program invites 
applications for faculty positions at all levels 
(visiting positions are also available). The 
Ph.D. in Computer Science or equivalent is 
required. Applicants for Full or Associate 
Professor must have a strong publication 
record with funding history preferred. Ap¬ 
plicants for Assistant Professor positions 
should demonstrate promise of future re¬ 
search activity. Responsibilities include 
research, teaching and direction of Ph.D. 
dissertations. Applicants in all areas of Com¬ 
puter Science will be considered, especially 
desired are applicants with interest in Distri¬ 
buted Databases, Software Engineering, Ar¬ 
tificial Intelligence, and Computer Networks. 

The University is located in the most at¬ 
tractive suburbs of the Dallas metropolitan 
area where many high technology industries 
are located. Opportunities for University- 
Industry joint research projects and con¬ 
sulting are excellent. The Program expects to 
continue its growth into a major center for 
computer science research and teaching. 

The Program’s computation equipment 
includes a Convex C-l Super Minicom¬ 
puter, an ENCORE Multimax with 16 pro¬ 
cessors, and N-CUBE with 64 processors, 
several SUN workstation minicomputers and 
graphics equipment dedicated to research. 
The University’s equipment includes another 
Convex C-l Super Minicomputer, and IBM 
4381, a high speed connection to a Cray 
XMP/24 in the UTSCHPC and a large 
number of PC’s in microcomputer laborator¬ 
ies. All of the University’s computing facilities 
are connected via an Ethernet network. The 
extensive collection of the UTD library, as 
well as the other Texas libraries, is available 


on-line. The local network is connected to 
national and international networks like BIT- 
NET and CSNET. New faculty members will 
be consulted on equipment needs for their 
research. 

Currently, the Computer Science faculty 
numbers twelve and has good growth poten¬ 
tial. Applicants will have an opportunity to 
influence the direction of growth of the Pro¬ 
gram . For more information concerning the 
future plans of the Computer Science Pro¬ 
gram and UTD in general, please contact Dr. 
Eliezer Dekel, chairman of the Search Com¬ 
mittee at (214) 690-2178 or (214) 690-2808. 

Indication of sex and ethnicity for affirma¬ 
tive action statistical purposes is requested, 
but not required. A resume, with a list of at 
least three references (five for applicants for 
tenured positions), should be sent by April 
15, 1991, to: 

The University of Texas at Dallas 
Academic Search # 709 
P.O. Box 830688: M/S AD 2.1 
Richardson, TX 75083-0688 


COMPUTER GRAPHICS 
HARDWARE ENGINEER 

The duty of this position is to design high 
performance high resolution color graphics 
controllers and solve problems during produc¬ 
tion of the graphic controllers. Responsibilities 
will include initial specification, hardware 
design , prototype debug, documentation and 
interfacing with production staff to insure that 
final product is manufacturable and reliable. 
A Master of Science degree in Engineering is 
required. Six months design experience with 
TI TMS340XX family of graphics systems 
processors, various PLD families, and one 
course in real-time image processing applica¬ 
tions are necessary. 40 hours per week, and 
$673.08 per week. Apply at the Texas Em¬ 
ployment Commission, Houston, Texas, 
J.O. *5515151 and ad paid by an equal 
employment opportunity employer. 


UNIVERSITY OF MARYLAND 

Computer Vision/Human-Computer In¬ 
teraction: Assistant, Associate and Senior 
Research Scientist(s) to direct advanced re¬ 
search programs in computer vision or 
human-computer interaction. One year re¬ 
newable positions whose availability and 
continuation are dependent on contract/ 
grant funds. Depending on the area of re¬ 
search, Ph.D. in computer science, psychol¬ 
ogy, or closely related discipline required. 
For computer vision positions, experience in 
computer vision research required, specifi¬ 
cally in areas such as three-dimensional and 
time-varying scene analysis, robot naviga¬ 
tion, knowledge based vision systems, and 
computer architectures for vision. For human- 
computer interaction positions, experience is 
required in areas such as development of 
user interfaces and human factors testing. 
Salary commensurate with experience and 
qualifications. Closing date for accepting 
applications is September 1, 1991. Indicate 
which position and for which area of re¬ 
search you are applying and submit signed 
and dated curriculum vitae plus three refer¬ 
ences to: Karen G. Phillips, Center for Auto¬ 
mation Research, University of Maryland, 
College Park, MD 20742-3411. AA/EOE. 
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THE UNIVERSITY OF CINCINNATI 
Electrical and Computer Engineering 
Department 

Applications are solicited for several new 
tenure track faculty positions at all ranks 
starting September 1, 1991. Applicants in all 
areas of computer science and engineering 
are invited to apply, but the following areas 
are of special interest: microprocessor de¬ 
sign, parallel and distributed computing, 
software engineering, operating systems, 
programming languages, VLSI systems, 
computer-aided design, databases, compiler 
design, architecture, optical computing, and 
computer vision. 

The Department offers MS/Ph.D. pro¬ 
gram in computing sciences and computer 
engineering and also offers ABET accredited 
BS degree in computer engineering. Our 
Computer Science and Engineering faculty 
members are actively involved in research in 
architecture, parallel and distributed sys¬ 
tems, operating systems, VLSI design, and 
computer vision. Departmental resources in¬ 
clude a network of SUN Workstations, a VAX 
11/785, a VAX 11/750, a 16-processor 
ES-Kit, and numerous PCs. Every faculty of¬ 
fice has a Sun Workstation and laser printer; 
graduate student offices also have Sun 
Workstations. The department has recently 
filled 14 faculty positions and is engaged in 
an exciting period of further growth. Cur¬ 
rently the department has 3.0 full-time facul¬ 
ty, 140 full-time graduate students, 400 
undergraduate students, 2 major research 
centers, and 19 full-time staff members. 

All candidates should have a strong com¬ 
mitment to excellence in research and 
teaching and an earned Ph.D. in either 
Computer Science or Computer Engineer¬ 
ing. Please send curricula vitae and the 
names of three references to: Dr. Vik 
Kapoor, Head, Electrical and Computer 
Engineering Department, Mail Location 30, 
University of Cincinnati, Cincinnati, Ohio 
45221-0030. E-mail inquiries should be sent 
to vkapoor@ucecel.ece.uc.edu. 

The University of Cincinnati is an Affir¬ 
mative Action/Equal Opportunity employer 
and encourages and welcomes applications 
from women and minorities. 


INDIANA UNIVERSITY-PURDUE 

UNIVERSITY AT INDIANAPOLIS 
(IUPUI) 

The Department of Computer and Infor¬ 
mation Science invites applications for a 
tenure track position at the level of assistant 
or associate professor in scientific comput¬ 
ing/software engineering. The successful 
candidate is expected to be a member of a 
new interdisciplinary group in computa¬ 
tional science, to be developed jointly by 
the Department of Computer and Informa¬ 
tion Science and the Department of Mathe¬ 
matical Sciences. 

Applicants must have an earned doctorate 
and strong teaching credentials A demon¬ 
strated record of research is expected at the 
associate professor level. Assistant professor 
candidates must possess exceptional re¬ 
search potential. Special consideration will 
be given to applicants with a strong back¬ 
ground in numerical computation with ex¬ 
pertise and interest in the development of 


“intelligent” software for large-scale scientific 
computing problems. Salary and rank will be 
determined by experience and qualification. 

IUPUI is a rapidly growing comprehensive 
urban university with over 26,000 students. 
The university offers competitive salaries and 
provides excellent fringe benefits. Indianap¬ 
olis is a large, active metropolis and has 
available a dynamic industrial base con¬ 
ducive to joint research and consulting with 
our faculty. The six-hospital Medical Center 
at IUPUI is yet another source of interdis¬ 
ciplinary research for the Department. 

Applications and inquiries should be ad¬ 
dressed to Prof. Raymond C. Y. Chin, 
Chair, Department of Computer and Infor¬ 
mation Science, IUPUI, 1201 East 38th 
Street, Indianapolis, IN 46205-2868. Dead¬ 
line for applications: December 1, 1990. 
Late applications will be considered until 
position is filled. IUPUI is an Equal Oppor¬ 
tunity/Affirmation Action Employer. 
Women and minority candidates are en¬ 
couraged to apply. 


DEPARTMENT HEAD 
DEPARTMENT OF COMPUTER 
SCIENCE 

Louisiana Tech University 

Nominations and applications are invited 
for the position of Professor and Head of the 
Department of Computer Science at Louisi¬ 
ana Tech University. Applicants must have a 
Ph.D. in Computer Science or a closely re¬ 
lated field. In addition, the individual must 
have a superior record in teaching and re¬ 
search at the undergraduate and graduate 
level. The position will be a twelve month 
appointment and offer a competitive salary. 
Candidates must have a demonstrated com¬ 
mitment to excellence in teaching, research, 
and service and the ability to work effectively 
with faculty, students, and administration. 

The Department of Computer Science at 
Louisiana Tech University has seven (7) 
faculty and 125 students. The Department 
offers a CSAB accredited B.S. degree, the 
M.S. degree, and is currently considering 
joint establishment of an interdisciplinary 
Ph.D. program. The Computer Science De¬ 
partment features a departmental Ethernet 
linking faculty offices and laboratories. The 
Department computer equipment currently 
includes 10 Sun workstations with a file 
server, 2 microvaxes, and IBM RT, and nu¬ 
merous PC’s and peripherals. 

Louisiana Tech University is a state-sup- 
ported institution with over 10,000 students 
enrolled in six colleges. The College of Engi¬ 
neering is composed of 7 academic depart¬ 
ments with a total enrollment of about 1500 
students. Computer Science at Louisiana 
Tech is housed in the College of Engineering 
and enjoys close relationships with numer¬ 
ous faculty members and departments on 
joint ventures. Louisiana Tech University is 
located in Ruston, situated in beautiful North 
Louisiana. The community is warm and vital 
with a moderate cost of living. 

Louisiana Tech is expanding its research 
and graduate programs while maintaining 
and enhancing its reputation for excellence 
in teaching. This is an exciting time in Loui¬ 
siana Tech's history, and excellent opportu¬ 
nities exist for professional growth and 
development. If you want to make a signifi¬ 


cant impact, please apply. If you know 
others who fit this description, please nomi- 

Applicants should submit resumes, includ¬ 
ing a list of three references to: 

Barry A. Benedict, Dean 
College of Engineering 
Louisiana Tech University 
P.O. Box 10348 
Ruston, LA 71272 

Nominations can be sent to the same ad¬ 
dress, and nominees will be contacted for 
needed information. The review of applica¬ 
tions will begin immediately and will con¬ 
tinue until the position is filled. 

Louisiana Tech University is an equal op¬ 
portunity university. Women and minorities 
are encouraged to apply. 


WASHINGTON STATE UNIVERSITY 

The Department of Computer Science 
has recently merged with the Department of 
Electrical Engineering, and we seek to 
strengthen our capabilities in selected areas 
of Computer Science. Applications are in¬ 
vited for full-time tenure-track positions at 
Assistant Professor, Associate Professor and 
Full Professor levels. Responsibilities include 
undergraduate and graduate teaching and 
the initiation, conduct and supervision of 
research. Minimum qualifications include a 
Ph.D. degree in Computer Science or close¬ 
ly allied field and a demonstrated potential 
for research. Candidates for the higher ranks 
must have proven records of accomplish¬ 
ment as evidenced by publications and spon¬ 
sored research. Areas of primary interest are 
artificial intelligence, database systems, soft¬ 
ware engineering and parallel and distrib¬ 
uted computing. Screening will begin im¬ 
mediately and continue until all openings are 
filled. Positions are available starting January 
1, 1991 and August 16, 1991. 

To apply, send a resume and the names 
and addresses of at least three references to: 
Dr. Yacov Shamash, Chairman, Depart¬ 
ment of Electrical Engineering and Com¬ 
puter Science, Washington State University, 
Pullman, WA 99164-2752. WSU is an EA/ 
AA educator and employer. Protected 
group members are encouraged to apply. 


POSTDOCTORAL FELLOWSHIP 

NIH/NRSA postdoctoral position avail¬ 
able in the Research Medicine/Radiation 
Biophysics Division, Lawrence Berkeley 
Laboratory, to develop image correlation 
and analysis software for PET and NMR im¬ 
aging. A recent Ph.D. in Electrical Engineer¬ 
ing, Computer Science, Physics, or Bio¬ 
physics required. The successful candidate 
must be familiar with medical imaging tech¬ 
niques and image processing algorithms. 
Programming experience with the Unix 
operating system and the X window system 
desirable. U.S. citizenship or permanent 
resident status required. Send resume and 
names of three references to: Dr. Ronald 
Huesman, Research Medicine/Radiation 
Biophysics Division, Lawrence Berkeley 
Laboratory, 1 Cyclotron Rd., M.S. 55-121, 
Berkeley, CA 94720. An affirmative ac¬ 
tion/equal opportunity employer. M/F/H. 
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ADVANCE PROGRAM 

IEEE INTERNATIONAL CONFERENCE ON 

TOOLS for ARTIFICIAL INTELLIGENCE 

November 6-9, 1990, Hyatt-Hotel at Dulles Int. Airport, Herdon, VA 



Pre-Conference Tutorials 

Prof. B. W. Wah, University of Illinois at Urbana, Artificial 
Neural Networks and Parallel Processing, one-day tutorial. 

Prof. Patrick S. P. Wang, MIT and Northeastern University, 
Intelligent Pattern Recognition and Applications, one-day 
tutorial. 

Prof. J. P. Tsai, University of Illinois at Chicago, and 

Dr. I. Zualkerman, University of Minnesota, AI and Software 

Engineering, one-day tutorial. 

Dr. M. H. Ibrahim, EDS R&D, Object-Oriented Program¬ 
ming and AI, half-day tutorial. 

Prof. M. W. Perlin, Carnegie Mellon University, Constructing 
Efficient Artificial Algorithms, half-day tutorial. 

Dr. Michael Reinfrank, Siemens, On the Fundamental of 
Truth Maintenance, half-day tutorial. 

J. W. Shavlik, University of Wisconsin at Madison, Applying 
Machine Learning Algorithms, half-day tutorial. 


Conference Registration Fee 

Tutorials Advanced Registration fees (before Oct. 20, 1990) 

Full Day: IEEE member $210, Non-IEEE member $250, Student $170 
Half Day: IEEE member $120; Non-IEEE member $150, Student $100 
Late Tutorials Registration fees (after Oct. 20, 1990) 

Full Day: IEEE member $240, Non-IEEE member $290, Student $200 
Half Day: IEEE member $150, Non-IEEE member $180, Student $120 
Registration fees for the Conference (Before Oct. 20, 1990) 

IEEE member $200, Non-IEEE member $240, Student $150 
Registration fees for the Conference (After Oct. 20, 1990) 

IEEE member $240, Non-IEEE member $290, Student $150 

Name_ 

Address_ 


Send your money order or Personal check to: Prof. P. Sheu, Rutgers 
Univ. Dept, of Elec. & Computer Engr., Piscataway, NJ 08855. 

Tel: 201-932-5388. 

Hotel Reservation call 703-834-1234 


The First Day Program 

Keynote Speech by Prof. Buchanan 

Machine Learning as a Tool for Building Expert Systems 

Cl: Autonomous Systems El: Machine Learning Bl: Hybrid Knowledge F2: Software Engineering of 

and Path Planning|Based Tools I| Engineering Environments | Knowledge-based Systems 

Lunch 


Keynote Speech by Prof. Wah 

Resource Constrained Combinatorial Searches 


Dl: Neural Network 

FI: Software Process 

A2: Interactive 

B2: Problem Solving 

Architectures and Tools 

Support 

Systems 

Architectures 


The Second Day Program 


Keynote Speech by Prof. Chandrasekaran 

The Task Structure: Decomposition & Integration of Tasks in Building Knowledge Systems 

E2: Machine Learning 

Based Tools II 

D4: Neural Networks 

Panel Discussion on 
Maintenance of 

Expert Systems 

C2: Models and 
Algorithms 

Lunch 

E3: Genetic Algorithm 

Based Tools I 

D2: Algorithms and 
Techniques 

AI: Production Systems 

B7: AI and Software 
Engineering 

C3: Application 

Tools 

F3: Development 
Environments/Tools for AI 

B3: Prolog 

A4: Expert System 

Tools I 

Keynote Speech by Dr. Hong 

Building KB Tools along with the Applications 

& Dinner 


The Third Day Program 



Keynote Speech by Dr. Mizuguchi 



The State-of-Art AI Research in Japan 


C4: Imaging and 

F4: AI for Software 

B4: AI Languages 

C6: Application of 

Object Recognition 

Engineering 


AI 

Lunch 

A3: Parallel Systems 

D3: Applications 

B5: Evidential 

F5: AI And Software 



Reasoning 

Engineering 

C5: Knowledge-Based 

E4: Genetic Algorithm 

B6: Logic-Based 

A5: Expert System 

Systems 

Based Tools II 

AI Tools 

Tools II 



































BOOK REVIEWS 


Editor: Guy Johnson, Department of Information Technology, Rochester Institute of Technology, 1 Lomb Memorial Drive, Rochester, NY 14623. 


Functional Programming: Practice and Theory 

Bruce J. MacLennan (Addison-Wesley, Reading, Mass., 1990, 596 pp., $35.50) 


Structured programming, object-ori¬ 
ented programming, functional program¬ 
ming, egoless programming . . . every 
day we hear something about how to deal 
with the crucial programming phase that 
translates a software design into a con¬ 
crete implementation. Each programming 
paradigm also generates a programming 
language explicitly incorporating the par¬ 
adigm’s coqcepts. Functional program¬ 
ming is no exception. However, a pro¬ 
grammer can also use a particular set of 
concepts with existing programming lan¬ 
guages, gaining exactly the same advan¬ 
tages as with the language generated spe¬ 
cifically for that discipline. 

With this in mind, MacLennan’s inter¬ 
esting book on functional programming 
is divided into two major parts — prac¬ 
tice and theory — letting readers who are 


not mathematically inclined follow the 
concepts, terminology, and techniques. 

The material on practice concludes 
with two primary features of functional 
programming: higher order functions and 
delayed evaluation. The book’s first sec¬ 
tion also anticipates some important the¬ 
oretical results (such as independence of 
evaluation order for multiprocessor- 
based programming languages). 

The second part presents the same top¬ 
ics you can find in many texts on the 
mathematical foundations of program¬ 
ming. However, the last two chapters — 
on universal functions and evaluation or¬ 
der — are particularly interesting. They 
explain how to build an interpreter for a 
functional language using functional pro¬ 
gramming concepts. 

Although the book is not about partic¬ 


ular programming languages, MacLen¬ 
nan still needed a language for his exam¬ 
ples. He uses a language called ®, which 
can be translated easily to actual func¬ 
tional languages. Thus, this book can 
also be an effective introduction to Lisp, 
for example (which is not a pure func¬ 
tional language). 

Like any good textbook, this one has 
plenty of exercises (but no answers to 
some questions, although many hints are 
given)' I want to quote one question in 
particular: “Do you agree that mathemat¬ 
ics must play an increasing role in pro¬ 
gramming? Defend your position.” If you 
don’t have a position or can’t defend the 
one you do have, read this book. 

Sante Leonardis 

SIRTI S.p.A., Rome 


Applied Control of Manipulation Robots 

Miomir Vukobratovic and Dragan Stokic (John Wiley & Sons, New York, 1989, 387 pp., $39.95) 


This book is intended as a robot- 
control text for upper undergraduate and 
graduate courses. However, most robot¬ 
ics courses cover both mechanics and con¬ 
trol, and this book covers only control. 

I also don’t recommend the book to 
practitioners for self-instruction (in all 
fairness, the authors did not target this 
audience). The reader who doesn’t know 
robot mechanics will not understand the 
significance of the control schemes, and 
the reader who does know mechanics 
will already have been exposed to the 
control schemes. 

Although the authors assume that the 
reader already has some background in 
robot mechanics, they still develop some 
of the mechanics in this volume, since 
developing robot control relies a great 
deal on mechanics. The authors also 
heavily reference Vukobratovic’s com¬ 


panion work. Applied Dynamics of Ma¬ 
nipulation Robots (Springer-Verlag, 
1989). I found the heavy reliance on out¬ 
side references distracting. 

The main material is a classic develop¬ 
ment of control for robot systems. The 
authors analyze servo control, examine 
the control of simultaneous motions, de¬ 
velop the linearized model of a robot, 
discuss dynamic control, and thoroughly 
cover adaptive robot control and control 
of constrained motion. 

They also include an appendix with 
the Fortran source code for a software 
package to synthesize robot control sys¬ 
tems. The package is designed for use on 
a VAX using VMS and includes routines 
to simulate robot dynamics under various 
control laws. The software is extensive 
and contains many comments. 

As a treatise on robot control only, the 


book’s coverage is credible. The authors 
liberally use examples and exercises 
ranging from the theoretical (determining 
the analytic form of the inverse function 
for a robotic structure) to the practical 
(determining the number of parallel Intel 
8080/8087 processors required to pro¬ 
vide signals for three actuators every 10 
milliseconds). 

The book’s greatest problems were per¬ 
petrated by the publisher. The book is an 
awkward translation of a work published 
in Yugoslavia. In addition, the publisher 
used a hard-to-read typewriter-style type¬ 
face. The concepts of robotic control are 
difficult enough without adding stumbling 
blocks. The editors did the authors a dis¬ 
service by not correcting these problems. 

Ralph Tanner 

Western Michigan University 
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Neural and Concurrent Real-Time Systems: The Sixth Generation 

Branko Soucek (John Wiley & Sons, New York, 1989, 387 pp., $39.95) 


According to Soucek, the characteris¬ 
tic that separates sixth-generation com¬ 
puting systems from previous genera¬ 
tions is artificial intelligence in which 
“brain behavior” and “molecular behav¬ 
ior” methods augment traditional rule- 
based inference structures. Brain-based 
techniques involve neural networks that 
attempt to mimic certain aspects of brain 
processing via large, highly interconnect¬ 
ed arrangements of relatively simple 
computing elements. Molecular methods 
encompass extensions of the genetic al¬ 
gorithm paradigm in which a population 
of tentative solutions evolves under cer¬ 
tain stochastic pressures into an ensem¬ 
ble dominated by actual solutions. These 
themes have been vigorously researched 
lately, and Soucek presents an extensive 
overview of the concepts and methodolo¬ 
gies developed so far. He describes many 
applications, some of which are available 
as commercial products. 

Although he mentions genetic systems 
in passing, Soucek is most concerned 
with neural networks. Since neural net¬ 
works emphasize analog computation, 
the book starts with a discussion of sig¬ 
nal processing tools and their interfaces 
with the digital world, followed by sev¬ 
eral chapters devoted to the major neural 
network models, such as back propaga¬ 
tion, simulated annealing, and adaptive 


resonance. Soucek uses the term “intelli¬ 
gent processes” to refer to the many vari¬ 
ations of these models, together with 
their applications to computer vision, ro¬ 
botics, process control, and pattern rec¬ 
ognition. He also classifies connectionist 
approaches — field computers, neural 
networks, feature extractors, and frame- 
based systems — based on processing- 
element granularity. 

Soucek reserves the term “intelligent 
systems” for more flexible machines 
configured from Transputers or the 
equivalent, which he examines in the fi¬ 
nal chapters. He discusses the Inmos 
Transputer and Occam, its parallel-pro¬ 
gramming language, in some detail. The 
book then concludes with a chapter on 
market opportunities associated with the 
new technologies and a list of manufac¬ 
turers and products. 

While the book’s scope is wide, 
Soucek’s discussions are terse and quali¬ 
tative, with the exception of his treatment 
of the Transputer. Although he does cite 
appropriate references, he does not ex¬ 
plain underlying principles. Consequent¬ 
ly, I don’t recommend this book as a sup¬ 
porting text for a technical course. The 
most appropriate reader would be some¬ 
one who has worked out several neural 
network concepts and is interested in 
variations of these themes. 


The book could also benefit managers 
developing commercial neural network 
products. Such readers should skip the 
technical passages and concentrate on the 
sections dealing with product develop¬ 
ment. Be aware, though, that much of the 
product material is excerpted from the 
manufacturers’ literature and tends to be 
enthusiastic about product capabilities. 

While the book’s real-world examples 
emphasize the engineering material, its 
survey scope resembles McClelland and 
Rumelhart’s Parallel and Distributed 
Processing volumes (MIT Press, 1986). 
However, the latter argue for the connec¬ 
tionist approach more persuasively. Also, 
Mead’s Analog VLSI and Neural Systems 
(Addison-Wesley, 1989) is narrower in 
focus than Soucek’s book but technically 
more complete in addressing the engi¬ 
neering development needed to apply 
neural network theory to nontrivial 
applications. 

Neural and Concurrent Real-Time 
Systems is coherent, well organized, and 
valuable for its unifying overview of the 
fields and its listing of products that 
successfully apply the techniques. How¬ 
ever, it is of limited use as a textbook or 
reference. 

James L. Johnson 

Western Washington University 


Computer Systems Performance Management and Capacity Planning 

John Cady and Bruce Howarth (Prentice Hall, Englewood Cliffs, N.J., 1990, 310 pp., $43.20) 


There are many ways to teach an un¬ 
dergraduate performance evaluation 
course. The approaches depend on the 
students’ background in such disciplines 
as operating systems, computer architec¬ 
ture, network protocols, probabilistic 
models, and statistical techniques. An¬ 
other (and perhaps more important) fac¬ 
tor is the instructor’s own preferences 
and interests in topics within the subject 
area. Computer Systems Performance 
Management and Capacity Planning 
aims at a course that would be solid, yet 
realistic and practical. 

As do all textbooks, this one has to 
make compromises. Two of them are es¬ 
pecially notable. First, the authors left 
out both local and wide area networks 
because of the sheer volume of the mate¬ 
rial. The two best-known network-per¬ 
formance textbooks — Andrew S. 


Tanenbaum’s Computer Networks (Pren¬ 
tice Hall, 1988) and Mischa Schwartz’ 
Telecommunication Networks (Addison- 
Wesley, 1987) — are three to four times 
thicker than this one, and their material 
is more suited to a graduate course. 

Second, the authors seem to have 
struggled with the issue that troubles ev¬ 
ery instructor of a performance course: 
given students with different degrees of 
exposure to the necessary tools, how 
much time, if any, should be spent on in¬ 
troducing or reviewing the tools. The au¬ 
thors’ solution is quite appealing. They 
devote about 40 percent of the book to 
simulation techniques and queueing 
models, introducing them in the context 
of performance models rather than devel¬ 
oping abstract tools. 

In Chapter 2, the authors review the 
main components of a computer system. 


I found this material rather weak; it does 
not convey much information to those 
who are already familiar with the con¬ 
cepts (virtual memory, caches, etc.), and 
it cannot be used as an introduction for 
those who are not. Chapter 3 then intro¬ 
duces performance terminology, includ¬ 
ing a classification of work load. 

Chapters 4-6 describe quantitative per¬ 
formance evaluation tools. The authors 
cover Reiser and Lavenberg’s elegant 
mean-value analysis in Chapter 4 and the 
case of multiple work load classes in 
Chapter 5. Chapter 6 moves toward more 
realistic models. It is devoted to load-de- 
pendent service centers, such as a system 
with several disk drives sharing a com¬ 
mon channel connecting them with the 
CPU. 

Chapter 7 is a concise introduction to 
discrete event simulation. Understand- 
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ably, the authors did not want to get en¬ 
tangled with a specialized simulation 
language. On the other hand, they did not 
want to restrict the discussion to the level 
of block diagrams. As a result, they use 
Pascal in this chapter, which is probably 
reasonable in Australia (where the authors 
teach), although many American readers 
would probably prefer the C language. 

The authors shift their attention in 
Chapters 8 and 9 to more practical as¬ 
pects: work load parameters, bench¬ 
marks, measurement techniques, and 
system tuning. 

The remaining three chapters are con¬ 


cerned more with management-oriented 
issues. The authors briefly discuss meth¬ 
ods to characterize and forecast work 
loads and predict resource requirements. 
Finally, they touch on such real-life 
problems as negotiating service-level 
agreements and how much money an or¬ 
ganization should spend on capacity 
management. 

Each chapter ends with various types 
of exercises. However, instructors who 
might think about adopting the text would 
probably prefer a larger pool of exercises 
of each type to choose from. This is my 
main complaint about the book. A college 


textbook should contain at least twice as 
much material as can be covered in the 
classroom. That way, the instructor has 
the flexibility to tailor the text to his or 
her taste. 

Overall, the book left a good impres¬ 
sion. It is a valuable addition to the exist¬ 
ing books in this rapidly changing area. 

It should be attractive to those who want 
to familiarize themselves with the sub¬ 
ject but do not plan to become research¬ 
ers in this area. 

Eugene Veklerov 

Lawrence Berkeley Laboratory 
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Software Engineering Management 

Harry M. Sneed (Ellis Horwood Ltd., Chichester, England, 1989, 212 pp., $49.95) 


Sneed’s book consists of two main 
parts. The first contains five chapters dis¬ 
cussing fundamental concepts in soft¬ 
ware engineering, with emphasis on soft¬ 
ware management. Topics covered in this 
part include software economics, soft¬ 
ware productivity, software quality, and 
business systems planning. 

The second part details the tasks in¬ 
volved in managing software projects, 
including system definition, project cost 
analysis, project planning, software 
maintenance, and configuration manage¬ 
ment. Most of the topics in both parts are 
discussed in every introductory software 
engineering text. 

The book also discusses a software 
management system called Softman, 
which implements the tasks described in 
the second part. Softman integrates sys¬ 
tem definition, project management (in¬ 
cluding project cost analysis, project 
planning, and project monitoring), and 
configuration management. Unfortunate¬ 
ly, the author does not evaluate or assess 
the system, even though some German 
companies have already used it. 

The book presents software engineer¬ 
ing management — one of the most com¬ 


plicated issues in software engineering 
— in a concise and understandable man¬ 
ner, making it perfect for those interested 
in managing software projects. It pro¬ 
vides sufficient information for novices 
to get started without overloading them 
with technical details. Also, Ian Johnston 
did a nice job of translating the book 
from German into English. The book 
would have been still better if the author 
had summarized the metrics, either in the 
front material or the appendix. 

The book’s major weakness is that 
some of the metrics lack a theoretical 
foundation. For example, the author de¬ 
fines ease of maintenance as the original 
cost minus the cost of maintenance, di¬ 
vided by the original cost. How do we 
interpret this metric? Is it meaningful or 
useful? In the case of an evolving system 
with many enhancements, the mainte¬ 
nance cost could equal or exceed the orig¬ 
inal cost, making the ease of maintenance 
zero or a negative value. This seems un¬ 
reasonable. After all, defining a metric is 
much easier than determining whether 
the metric is meaningful or useful. 

The book is based on the quantifica¬ 
tion of software management informa¬ 


tion, namely, software metrics. Interested 
readers will find a more formal discus¬ 
sion of software metrics in Software En¬ 
gineering Metrics and Models by Conte, 
Dunsmore, and Shen (Benjamin/Cum¬ 
mings, 1986). 

There are some confusions in termi¬ 
nology. The author uses the term “soft¬ 
ware engineering management” in the 
first several pages, but beginning in 
Chapter 1 he changes to “software man¬ 
agement” without any explanation. In 
Chapter 9, he uses “software manage¬ 
ment” to mean “software maintenance.” 
The author should use terms as they are 
commonly accepted and in a consistent 
manner. 

In general, this book offers nothing 
more for those who have already taken 
an introductory software engineering 
course. However, it is a good reference 
for project managers dealing with data 
processing applications. Computer scien¬ 
tists and software engineers interested in 
software management can also use this 
book for independent study. 

Alan Tsu-I Yaung 

Northeast Louisiana University 
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